Lucene search
MitreCVELIST:CVE-2010-4020HistoryDec 02, 2010 - 4:00 p.m.
CVE-2010-4020
2010-12-0216:00:00
mitre
raw.githubusercontent.com
2
MIT Kerberos 5 (aka krb5) 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which might allow remote authenticated users to forge a (1) AD-SIGNEDPATH or (2) AD-KDC-ISSUED signature, and possibly gain privileges, by leveraging the small key space that results from certain one-byte stream-cipher operations.
Related
openvas
openvas
FreeBSD Ports: krb5
2011-01-24 00:00:00
FreeBSD Ports: krb5
2011-01-24 00:00:00
Fedora Update for krb5 FEDORA-2010-18409
2010-12-23 00:00:00
ubuntucve
ubuntucve
CVE-2010-4020
2010-12-02 00:00:00
nessus
nessus
FreeBSD : krb5 -- RFC 3961 key-derivation checksum handling vulnerability (1d193bba-03f6-11e0-bf50-001a926c7637)
2010-12-10 00:00:00
RHEL 6 : krb5 (RHSA-2010:0925)
2010-12-01 00:00:00
Fedora 13 : krb5-1.7.1-16.fc13 (2010-18425)
2010-12-10 00:00:00
prion
prion
Design/Logic Flaw
2010-12-02 16:22:00
cve
cve
CVE-2010-4020
2010-12-02 16:22:21
debiancve
debiancve
CVE-2010-4020
2010-12-02 16:22:21
freebsd
freebsd
krb5 -- RFC 3961 key-derivation checksum handling vulnerability
2010-11-30 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: krb5-1.8.2-7.fc14
2010-12-08 21:41:21
[SECURITY] Fedora 13 Update: krb5-1.7.1-16.fc13
2010-12-09 21:57:48
[SECURITY] Fedora 14 Update: krb5-1.8.2-8.fc14
2011-02-18 01:52:10
redhat
redhat
(RHSA-2010:0925) Important: krb5 security and bug fix update
2010-11-30 00:00:00
ubuntu
ubuntu
Kerberos vulnerabilities
2010-12-09 00:00:00
securityvulns
securityvulns
vmware
vmware
oraclelinux
oraclelinux
krb5 security update
2011-02-10 00:00:00
ibm
ibm
gentoo
gentoo
MIT Kerberos 5: Multiple vulnerabilities
2012-01-23 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2015
2015-07-14 00:00:00