NVD

Id
15338  
Name
CVE-2010-4020  
Description
MIT Kerberos 5 (aka krb5) 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which might allow remote authenticated users to forge a (1) AD-SIGNEDPATH or (2) AD-KDC-ISSUED signature, and possibly gain privileges, by leveraging the small key space that results from certain one-byte stream-cipher operations.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-12-02  
Modified Date
2016-03-31  
Seq
2010-4020  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
86376 15338 CVE-2010-4020 http://kb.vmware.com/kb/1035108  View
86377 15338 CVE-2010-4020 APPLE-SA-2011-03-21-1  View
86378 15338 CVE-2010-4020 FEDORA-2010-18409  View
86379 15338 CVE-2010-4020 FEDORA-2010-18425  View
86380 15338 CVE-2010-4020 SUSE-SR:2010:023  View
86381 15338 CVE-2010-4020 SUSE-SR:2010:024  View
86382 15338 CVE-2010-4020 [security-announce] 20110428 VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console  View
86383 15338 CVE-2010-4020 http://support.apple.com/kb/HT4581  View
86384 15338 CVE-2010-4020 http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-007.txt  View
86385 15338 CVE-2010-4020 MDVSA-2010:246  View
86386 15338 CVE-2010-4020 http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html  View
86387 15338 CVE-2010-4020 RHSA-2010:0925  View
86388 15338 CVE-2010-4020 20101130 MITKRB5-SA-2010-007 Multiple checksum handling vulnerabilities [CVE-2010-1324 CVE-2010-1323 CVE-2010-4020 CVE-2010-4021]  View
86389 15338 CVE-2010-4020 20110428 VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console  View
86390 15338 CVE-2010-4020 45117  View
86391 15338 CVE-2010-4020 1024803  View
86392 15338 CVE-2010-4020 USN-1030-1  View
86393 15338 CVE-2010-4020 http://www.vmware.com/security/advisories/VMSA-2011-0007.html  View
86394 15338 CVE-2010-4020 ADV-2010-3094  View
86395 15338 CVE-2010-4020 ADV-2010-3095  View
86396 15338 CVE-2010-4020 ADV-2010-3118  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36762 JVNDB-2010-002542 MIT Kerberos 5 における AD-SIGNEDPATH または AD-KDC-ISSUED 署名を偽造される脆弱性 MIT Kerberos 5 は、RC4 key-derivation チェックサムを拒否しないため、AD-SIGNEDPATH および AD-KDC-ISSUED 署名を偽造される、または権限を取得される脆弱性が存在します。 CVE-2010-4020 46600 CVE-2010-4020 15338 3.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002542.html 2010-11-30 2015-07-29 View