Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2010-4021
HistoryDec 02, 2010 - 4:22 p.m.

Design/Logic Flaw

2010-12-0216:22:00
PRIOn knowledge base
www.prio-n.com
2

6.6 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:S/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

73.0%

JSON

The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 does not properly restrict the use of TGT credentials for armoring TGS requests, which might allow remote authenticated users to impersonate a client by rewriting an inner request, aka a “KrbFastReq forgery issue.”

CPENameOperatorVersion
kerberos_5eq1.7

Related

nessus 16
ubuntucve 1
freebsd 1
openvas 12
debiancve 1
cve 1
ubuntu 1
securityvulns 5
vmware 1
ibm 1
gentoo 1
nessus
nessus
FreeBSD : krb5 -- client impersonation vulnerability (4ccbd40d-03f7-11e0-bf50-001a926c7637)
2010-12-10 00:00:00
Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : krb5 vulnerabilities (USN-1030-1)
2010-12-10 00:00:00
SuSE 10 Security Update : krb5 (ZYPP Patch Number 7243)
2010-12-14 00:00:00
ubuntucve
ubuntucve
CVE-2010-4021
2010-12-02 00:00:00
freebsd
freebsd
krb5 -- client impersonation vulnerability
2010-11-30 00:00:00
openvas
openvas
FreeBSD Ports: krb5
2011-01-24 00:00:00
FreeBSD Ports: krb5
2011-01-24 00:00:00
Ubuntu: Security Advisory (USN-1030-1)
2010-12-23 00:00:00
debiancve
debiancve
CVE-2010-4021
2010-12-02 16:22:00
cve
cve
CVE-2010-4021
2010-12-02 16:22:00
ubuntu
ubuntu
Kerberos vulnerabilities
2010-12-09 00:00:00
securityvulns
securityvulns
MITKRB5-SA-2010-007 Multiple checksum handling vulnerabilities [CVE-2010-1324 CVE-2010-1323 CVE-2010-4020 CVE-2010-4021]
2010-12-01 00:00:00
MIT Kerberos 5 multiple checksum vulnerabilities
2010-12-01 00:00:00
VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console
2011-05-02 00:00:00
vmware
vmware
VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console
2011-04-28 00:00:00
ibm
ibm
Security Bulletin: Multiple security vulnerabilities found in open source code that is shipped with IBM Security Verify Access
2022-07-06 18:27:44
gentoo
gentoo
MIT Kerberos 5: Multiple vulnerabilities
2012-01-23 00:00:00

6.6 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:S/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

73.0%

JSON
Related for PRION:CVE-2010-4021
nessus16ubuntucve1freebsd1openvas12debiancve1cve1ubuntu1securityvulns5vmware1ibm1gentoo1