4.3
CVE-2010-1324
- EPSS 3.67%
- Published 02.12.2010 16:22:20
- Last modified 11.04.2025 00:51:21
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to forge GSS tokens, gain privileges, or have unspecified other impact via (1) an unkeyed checksum, (2) an unkeyed PAC checksum, or (3) a KrbFastArmoredReq checksum based on an RC4 key.
Data is provided by the National Vulnerability Database (NVD)
Mit ≫ Kerberos 5 Version1.7
Mit ≫ Kerberos 5 Version1.7.1
Mit ≫ Kerberos 5 Version1.8
Mit ≫ Kerberos 5 Version1.8.1
Mit ≫ Kerberos 5 Version1.8.2
Mit ≫ Kerberos 5 Version1.8.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.67% | 0.874 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 3.7 | 2.2 | 1.4 |
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|