PT-2022-5459 · Microsoft +7 · Windows Kerberos +9

Name of the Vulnerable Software and Affected Versions: Windows Kerberos versions prior to the update that addresses the RC4-HMAC vulnerability Samba Active Directory DC affected versions not specified Description: The issue is related to the implementation of the Kerberos protocol in Windows...

PT-2022-5460 · Microsoft +8 · Windows Kerberos +9

Name of the Vulnerable Software and Affected Versions: Windows Kerberos affected versions not specified Description: The issue is related to the implementation of the Kerberos protocol in Windows operating systems, specifically concerning access control weaknesses. Exploitation of this issue may...

PT-2022-5351 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management in the implementation of the Kerberos protocol in Windows operating systems. It allows a remote attacker to elevate their privileges...

PT-2022-5352

Name of the Vulnerable Software and Affected Versions Windows Kerberos affected versions not specified Description The issue is related to errors in privilege management in the implementation of the Kerberos protocol in Windows operating systems. It allows a remote attacker to elevate their...

PT-2022-2455 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management in the implementation of the Kerberos protocol in Windows operating systems. It allows a remote attacker to elevate their privileges...

PT-2022-3138 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Kerberos network protocol authentication for the isolated software environment AppContainer in Windows operating systems, which is connecte...

PT-2022-2770 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Kerberos protocol in Windows, specifically due to insufficient input validation. This allows a remote attacker to potentially execute...

PT-2022-1530 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management in the implementation of the Kerberos protocol in Windows operating systems. It allows a remote attacker to elevate their privileges...

New Azure AD Bug Lets Hackers Brute-Force Passwords Without Getting Caught

Cybersecurity researchers have disclosed an unpatched security vulnerability in the protocol used by Microsoft Azure Active Directory that potential adversaries could abuse to stage undetected brute-force attacks. "This flaw allows threat actors to perform single-factor brute-force attacks agains...

DEBIAN-CVE-2021-37750

The Key Distribution Center KDC in MIT Kerberos 5 aka krb5 before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/dotgsreq.c via a FAST inner body that lacks a server field...

AD Starter Scan - Kerberos Pre-authentication Validation

Binary data adsikerberospreauth.nbin...

AD Starter Scan - Weak Kerberos encryption

Binary data adsikerberosenc.nbin...

PT-2020-5293 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security feature bypass in the implementation of the Kerberos protocol in the Windows operating system, which is associated with a violation of the data protection...

Denial Of Service (DoS)

Bro is vulnerable to denial of service. The vulnerability existed because there is a memory leak potentially leading to DoS in scripts/base/protocols/krb/main.bro in the Kerberos protocol parser...

The vulnerability of the Kerberos protocol implementation in Cisco Adaptive Security Appliance (ASA) microprogramming software allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Kerberos protocol implementation in Cisco Adaptive Security Appliance ASA microprogramming software is related to authentication errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected...

PT-2020-2231 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Description: The issue is related to errors in the Kerberos protocol implementation, which could allow a remote attacker to impersonate the Kerberos key distributi...

Description of the Microsoft Office for Mac 2011 14.3.2 Update

Describes the security update for Microsoft Office for Mac 2011 14.3.2, that was released on March12, 2013.IntroductionMicrosoft has released security bulletin MS13-026. This security bulletin contains all the relevant information about the security update for Microsoft Office for Mac 2011. To vi...

Oracle Java SE/Java SE Embedded CVE-2020-2590 Remote Security Vulnerability

Description Oracle Java SE and Java SE Embedded are prone to a remote security vulnerability. The vulnerability can be exploited over 'Kerberos' protocol. This issue affects the 'Security' component. This vulnerability affects the following supported versions: Java SE: 7u241, 8u231, 11.0.5, 13.0....

CVE-2019-12175

In Zeek Network Security Monitor formerly known as Bro before 2.6.2, a NULL pointer dereference in the Kerberos aka KRB protocol parser leads to DoS because a case-type index is mishandled...

CVE-2019-12175

In Zeek Network Security Monitor formerly known as Bro before 2.6.2, a NULL pointer dereference in the Kerberos aka KRB protocol parser leads to DoS because a case-type index is mishandled...