NVD

Id
15339  
Name
CVE-2010-4021  
Description
The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 does not properly restrict the use of TGT credentials for armoring TGS requests, which might allow remote authenticated users to impersonate a client by rewriting an inner request, aka a "KrbFastReq forgery issue."  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-12-02  
Modified Date
2011-05-04  
Seq
2010-4021  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
86397 15339 CVE-2010-4021 http://kb.vmware.com/kb/1035108  View
86398 15339 CVE-2010-4021 APPLE-SA-2011-03-21-1  View
86399 15339 CVE-2010-4021 SUSE-SR:2010:023  View
86400 15339 CVE-2010-4021 SUSE-SR:2010:024  View
86401 15339 CVE-2010-4021 [security-announce] 20110428 VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console  View
86402 15339 CVE-2010-4021 http://support.apple.com/kb/HT4581  View
86403 15339 CVE-2010-4021 http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-007.txt  View
86404 15339 CVE-2010-4021 MDVSA-2010:246  View
86405 15339 CVE-2010-4021 20101130 MITKRB5-SA-2010-007 Multiple checksum handling vulnerabilities [CVE-2010-1324 CVE-2010-1323 CVE-2010-4020 CVE-2010-4021]  View
86406 15339 CVE-2010-4021 20110428 VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console  View
86407 15339 CVE-2010-4021 45122  View
86408 15339 CVE-2010-4021 1024803  View
86409 15339 CVE-2010-4021 USN-1030-1  View
86410 15339 CVE-2010-4021 http://www.vmware.com/security/advisories/VMSA-2011-0007.html  View
86411 15339 CVE-2010-4021 ADV-2010-3094  View
86412 15339 CVE-2010-4021 ADV-2010-3118  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37017 JVNDB-2010-002797 MIT Kerberos 5 の Key Distribution Center におけるクライアントになりすまされる脆弱性 MIT Kerberos 5 の Key Distribution Center (KDC) には、TGS リクエストを保護する TGT 証明書の使用を適切に制限しないため、クライアントになりすまされる脆弱性が存在します。 CVE-2010-4021 46601 CVE-2010-4021 15339 2.1 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002797.html 2010-11-30 2013-11-01 View