CVE-2014-5351

EPSS 0.35%

發布日:2014/10/10修改日:2026/4/28

也稱為:DEBIAN-CVE-2014-5351

描述

The kadm5_randkey_principal_3 function in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13 sends old keys in a response to a -randkey -keepold request, which allows remote authenticated users to forge tickets by leveraging administrative access.

受影響套件(1)

Debian/krb5from 0, < 1.12.1+dfsg-10

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2014-5351