NVD

Id
43046  
Name
CVE-2012-1012  
Description
server/server_stubs.c in the kadmin protocol implementation in MIT Kerberos 5 (aka krb5) 1.10 before 1.10.1 does not properly restrict access to (1) SET_STRING and (2) GET_STRINGS operations, which might allow remote authenticated administrators to modify or read string attributes by leveraging the global list privilege.  
Reject
 
CVSS Version
2  
CVSS Score
5.5  
Severity
Medium  
CVSS Base Score
5.5  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-06-07  
Modified Date
2012-06-12  
Seq
2012-1012  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
216632 43046 CVE-2012-1012 http://krbdev.mit.edu/rt/Ticket/Display.html?user=guest&pass=guest&id=7093  View
216633 43046 CVE-2012-1012 http://src.mit.edu/fisheye/changelog/krb5/?cs=25704  View
216634 43046 CVE-2012-1012 http://web.mit.edu/kerberos/krb5-1.10/  View
216635 43046 CVE-2012-1012 https://bugzilla.redhat.com/show_bug.cgi?id=796438  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26935 JVNDB-2012-002642 MIT Kerberos の kadmin プロトコルの実装における文字列属性を変更される脆弱性 MIT Kerberos の kadmin プロトコルの実装内の server/server_stubs.c は、(1) SET_STRING および (2) GET_STRINGS 操作へのアクセスを適切に制限しないため、文字列属性を変更される、または読まれる脆弱性が存在します。 CVE-2012-1012 54250 CVE-2012-1012 43046 5.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002642.html 2012-02-21 2012-06-11 View