NVD

Id
33850  
Name
CVE-2014-6324  
Description
The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote authenticated domain users to obtain domain administrator privileges via a forged signature in a ticket, as exploited in the wild in November 2014, aka "Kerberos Checksum Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-11-18  
Modified Date
2017-01-06  
Seq
2014-6324  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
175778 33850 CVE-2014-6324 http://blogs.technet.com/b/srd/archive/2014/11/18/additional-information-about-cve-2014-6324.aspx  View
175779 33850 CVE-2014-6324 SSRT101864  View
175780 33850 CVE-2014-6324 62556  View
175781 33850 CVE-2014-6324 MS14-068  View
175782 33850 CVE-2014-6324 70958  View
175783 33850 CVE-2014-6324 1031237  View
175784 33850 CVE-2014-6324 TA14-323A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16648 JVNDB-2014-005523 Microsoft Windows の Kerberos Key Distribution Center (KDC) に Privilege Attribute Certificate (PAC) 署名検証不備の脆弱性 Microsoft Windows の Kerberos Key Distribution Center (KDC) には、Privilege Attribute Certificate (PAC) 署名検証不備の脆弱性が存在します。 CVE-2014-6324 73616 CVE-2014-6324 33850 9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005523.html 2014-11-18 2015-05-27 View