CVE-2012-1012

CVE-2012-1012 affects MIT Kerberos 5 (krb5) 1.10 and earlier with kadmind RPC ACLs that don’t properly restrict access to SET_STRING and GET_STRINGS. This could allow remote authenticated administrators to modify or read string attributes via the global list privilege. The publicly documented fix...

CVE-2012-1012

server/serverstubs.c in the kadmin protocol implementation in MIT Kerberos 5 aka krb5 1.10 before 1.10.1 does not properly restrict access to 1 SETSTRING and 2 GETSTRINGS operations, which might allow remote authenticated administrators to modify or read string attributes by leveraging the global...

CVE-2010-0629

Use-after-free vulnerability in kadmin/server/serverstubs.c in kadmind in MIT Kerberos 5 aka krb5 1.5 through 1.6.3 allows remote authenticated users to cause a denial of service daemon crash via a request from a kadmin client that sends an invalid API version number...