NVD

Id
11594  
Name
CVE-2010-0014  
Description
System Security Services Daemon (SSSD) before 1.0.1, when the krb5 auth_provider is configured but the KDC is unreachable, allows physically proximate attackers to authenticate, via an arbitrary password, to the screen-locking program on a workstation that has any user"s Kerberos ticket-granting ticket (TGT); and might allow remote attackers to bypass intended access restrictions via vectors involving an arbitrary password in conjunction with a valid TGT.  
Reject
 
CVSS Version
2  
CVSS Score
3.7  
Severity
Low  
CVSS Base Score
3.7  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-01-14  
Modified Date
2010-01-15  
Seq
2010-0014  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
63427 11594 CVE-2010-0014 37747  View
63428 11594 CVE-2010-0014 https://bugzilla.redhat.com/show_bug.cgi?id=553233  View
63429 11594 CVE-2010-0014 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.0.1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37981 JVNDB-2010-003766 SSSD における制限されたアクセスを回避される脆弱性 System Security Services Daemon (SSSD) には、krb5 auth_provider が設定されているが KDC が到達不能になっている際、ユーザの Kerberos チケット保証チケット (TGT) を保持するワークステーションの画面ロックプログラムに認証される、およびアクセス制限を回避される脆弱性が存在します。 CVE-2010-0014 42594 CVE-2010-0014 11594 3.7 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003766.html 2010-01-14 2012-06-26 View