NVD

Id
12855  
Name
CVE-2010-1323  
Description
MIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center (KDC), or forge a KRB-SAFE message via certain checksums that (1) are unkeyed or (2) use RC4 keys.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-12-02  
Modified Date
2016-03-31  
Seq
2010-1323  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
70827 12855 CVE-2010-1323 http://kb.vmware.com/kb/1035108  View
70828 12855 CVE-2010-1323 APPLE-SA-2011-03-21-1  View
70829 12855 CVE-2010-1323 FEDORA-2010-18409  View
70830 12855 CVE-2010-1323 FEDORA-2010-18425  View
70831 12855 CVE-2010-1323 SUSE-SR:2010:023  View
70832 12855 CVE-2010-1323 SUSE-SR:2010:024  View
70833 12855 CVE-2010-1323 SUSE-SU-2012:0010  View
70834 12855 CVE-2010-1323 SUSE-SU-2012:0042  View
70835 12855 CVE-2010-1323 [security-announce] 20110428 VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console  View
70836 12855 CVE-2010-1323 HPSBUX02623  View
70837 12855 CVE-2010-1323 SSRT100495  View
70838 12855 CVE-2010-1323 oval:org.mitre.oval:def:12121  View
70839 12855 CVE-2010-1323 http://support.apple.com/kb/HT4581  View
70840 12855 CVE-2010-1323 http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-007.txt  View
70841 12855 CVE-2010-1323 DSA-2129  View
70842 12855 CVE-2010-1323 MDVSA-2010:245  View
70843 12855 CVE-2010-1323 MDVSA-2010:246  View
70844 12855 CVE-2010-1323 http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html  View
70845 12855 CVE-2010-1323 RHSA-2010:0925  View
70846 12855 CVE-2010-1323 RHSA-2010:0926  View
70847 12855 CVE-2010-1323 20101130 MITKRB5-SA-2010-007 Multiple checksum handling vulnerabilities [CVE-2010-1324 CVE-2010-1323 CVE-2010-4020 CVE-2010-4021]  View
70848 12855 CVE-2010-1323 20110428 VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console  View
70849 12855 CVE-2010-1323 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console  View
70850 12855 CVE-2010-1323 45118  View
70851 12855 CVE-2010-1323 1024803  View
70852 12855 CVE-2010-1323 USN-1030-1  View
70853 12855 CVE-2010-1323 http://www.vmware.com/security/advisories/VMSA-2011-0007.html  View
70854 12855 CVE-2010-1323 http://www.vmware.com/security/advisories/VMSA-2011-0012.html  View
70855 12855 CVE-2010-1323 ADV-2010-3094  View
70856 12855 CVE-2010-1323 ADV-2010-3095  View
70857 12855 CVE-2010-1323 ADV-2010-3101  View
70858 12855 CVE-2010-1323 ADV-2010-3118  View
70859 12855 CVE-2010-1323 ADV-2011-0187  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36760 JVNDB-2010-002540 MIT Kerberos 5 における KRB-SAFE メッセージを偽造される脆弱性 MIT Kerberos 5 には、チェックサムの適合性を適切に判定しないため、Key Distribution Center (KDC) へのレスポンスを変更される、または KRB-SAFE メッセージを偽造される脆弱性が存在します。 CVE-2010-1323 43903 CVE-2010-1323 12855 2.6 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002540.html 2010-11-30 2015-07-29 View