NVD

Id
12856  
Name
CVE-2010-1324  
Description
MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to forge GSS tokens, gain privileges, or have unspecified other impact via (1) an unkeyed checksum, (2) an unkeyed PAC checksum, or (3) a KrbFastArmoredReq checksum based on an RC4 key.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-12-02  
Modified Date
2016-03-31  
Seq
2010-1324  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
70860 12856 CVE-2010-1324 http://kb.vmware.com/kb/1035108  View
70861 12856 CVE-2010-1324 APPLE-SA-2011-03-21-1  View
70862 12856 CVE-2010-1324 FEDORA-2010-18409  View
70863 12856 CVE-2010-1324 FEDORA-2010-18425  View
70864 12856 CVE-2010-1324 SUSE-SR:2010:023  View
70865 12856 CVE-2010-1324 SUSE-SR:2010:024  View
70866 12856 CVE-2010-1324 [security-announce] 20110428 VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console  View
70867 12856 CVE-2010-1324 SSRT100355  View
70868 12856 CVE-2010-1324 oval:org.mitre.oval:def:11936  View
70869 12856 CVE-2010-1324 http://support.apple.com/kb/HT4581  View
70870 12856 CVE-2010-1324 http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-007.txt  View
70871 12856 CVE-2010-1324 MDVSA-2010:246  View
70872 12856 CVE-2010-1324 http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html  View
70873 12856 CVE-2010-1324 RHSA-2010:0925  View
70874 12856 CVE-2010-1324 20101130 MITKRB5-SA-2010-007 Multiple checksum handling vulnerabilities [CVE-2010-1324 CVE-2010-1323 CVE-2010-4020 CVE-2010-4021]  View
70875 12856 CVE-2010-1324 20110428 VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console  View
70876 12856 CVE-2010-1324 45116  View
70877 12856 CVE-2010-1324 1024803  View
70878 12856 CVE-2010-1324 USN-1030-1  View
70879 12856 CVE-2010-1324 http://www.vmware.com/security/advisories/VMSA-2011-0007.html  View
70880 12856 CVE-2010-1324 ADV-2010-3094  View
70881 12856 CVE-2010-1324 ADV-2010-3095  View
70882 12856 CVE-2010-1324 ADV-2010-3118  View
70883 12856 CVE-2010-1324 ADV-2011-0187  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36761 JVNDB-2010-002541 MIT Kerberos 5 における GSS トークンを偽造される脆弱性 MIT Kerberos 5 は、チェックサムの適合性を適切に判定しないため、GSS トークンを偽造される、権限を取得される、またはその他の詳細不明な影響を受ける脆弱性が存在します。 CVE-2010-1324 43904 CVE-2010-1324 12856 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002541.html 2010-11-30 2015-07-29 View