CVE-2010-4021low
New! CVE Severity Now Using CVSS v3
The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Description
The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 does not properly restrict the use of TGT credentials for armoring TGS requests, which might allow remote authenticated users to impersonate a client by rewriting an inner request, aka a "KrbFastReq forgery issue."
References
http://kb.vmware.com/kb/1035108
http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
http://lists.vmware.com/pipermail/security-announce/2011/000133.html
http://support.apple.com/kb/HT4581
http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-007.txt
http://www.mandriva.com/security/advisories?name=MDVSA-2010:246
http://www.securityfocus.com/archive/1/514953/100/0/threaded
http://www.securityfocus.com/archive/1/517739/100/0/threaded
http://www.securityfocus.com/bid/45122
http://www.securitytracker.com/id?1024803
http://www.ubuntu.com/usn/USN-1030-1
http://www.vmware.com/security/advisories/VMSA-2011-0007.html
Vulnerable Software
Configuration 1
OR
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 89676 | VMware ESX / ESXi Multiple Vulnerabilities (VMSA-2011-0007) (remote check) | Nessus | Misc. | high |
| 80653 | Oracle Solaris Third-Party Patch Update : kerberos (cve_2010_1322_improper_input) | Nessus | Solaris Local Security Checks | medium |
| 75559 | openSUSE Security Update : krb5 (openSUSE-SU-2010:1053-1) | Nessus | SuSE Local Security Checks | medium |
| 68152 | Oracle Linux 4 / 5 : krb5 (ELSA-2010-0926) | Nessus | Oracle Linux Local Security Checks | medium |
| 57655 | GLSA-201201-13 : MIT Kerberos 5: Multiple vulnerabilities | Nessus | Gentoo Local Security Checks | medium |
| 53742 | openSUSE Security Update : krb5 (openSUSE-SU-2010:1053-1) | Nessus | SuSE Local Security Checks | medium |
| 53672 | openSUSE Security Update : krb5 (openSUSE-SU-2010:1053-1) | Nessus | SuSE Local Security Checks | medium |
| 53592 | VMSA-2011-0007 : VMware ESXi and ESX Denial of Service and third-party updates for Likewise components and ESX Service Console | Nessus | VMware ESX Local Security Checks | medium |
| 52754 | Mac OS X 10.6.x < 10.6.7 Multiple Vulnerabilities | Nessus | MacOS X Local Security Checks | high |
| 800796 | Mac OS X 10.6 < 10.6.7 Multiple Vulnerabilities | Log Correlation Engine | Operating System Detection | high |
| 5826 | Mac OS X 10.6 < 10.6.7 Multiple Vulnerabilities | Nessus Network Monitor | Generic | critical |
| 51159 | SuSE 10 Security Update : krb5 (ZYPP Patch Number 7243) | Nessus | SuSE Local Security Checks | medium |
| 51116 | Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : krb5 vulnerabilities (USN-1030-1) | Nessus | Ubuntu Local Security Checks | medium |
| 51103 | FreeBSD : krb5 -- client impersonation vulnerability (4ccbd40d-03f7-11e0-bf50-001a926c7637) | Nessus | FreeBSD Local Security Checks | low |
| 50974 | SuSE 11 / 11.1 Security Update : krb5 (SAT Patch Numbers 3547 / 3549) | Nessus | SuSE Local Security Checks | medium |
| 50863 | CentOS 4 / 5 : krb5 (CESA-2010:0926) | Nessus | CentOS Local Security Checks | medium |
| 50853 | RHEL 4 / 5 : krb5 (RHSA-2010:0926) | Nessus | Red Hat Local Security Checks | medium |
| 50852 | RHEL 6 : krb5 (RHSA-2010:0925) | Nessus | Red Hat Local Security Checks | medium |
| 50849 | Mandriva Linux Security Advisory : krb5 (MDVSA-2010:246) | Nessus | Mandriva Local Security Checks | medium |