CVE

Id
54255  
CVE No.
CVE-2012-1012  
Status
Candidate  
Description
server/server_stubs.c in the kadmin protocol implementation in MIT Kerberos 5 (aka krb5) 1.10 before 1.10.1 does not properly restrict access to (1) SET_STRING and (2) GET_STRINGS operations, which might allow remote authenticated administrators to modify or read string attributes by leveraging the global list privilege.  
Phase
Assigned (20120207)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
570181 54255 CVE-2012-1012 CONFIRM:http://krbdev.mit.edu/rt/Ticket/Display.html?user=guest&pass=guest&id=7093  View
570182 54255 CVE-2012-1012 CONFIRM:http://src.mit.edu/fisheye/changelog/krb5/?cs=25704  View
570183 54255 CVE-2012-1012 CONFIRM:http://web.mit.edu/kerberos/krb5-1.10/  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
25631 JVNDB-2012-001338 Basic Analysis and Security Engine の base_qry_main.php における SQL インジェクションの脆弱性 Basic Analysis and Security Engine (BASE) の base_qry_main.php には、SQL インジェクションの脆弱性が存在します。 CVE-2012-1017 54255 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001338.html  View