CWE Code: 310
Vulnerability Type: privilege_escalation
CVSS Score: 3.5
CWE Name:  Cryptographic Issues
Summary: mit kerberos 5 (aka krb5) 1.8.x through 1.8.3 does not reject rc4 key-derivation checksums, which might allow remote authenticated users to forge a (1) ad-signedpath or (2) ad-kdc-issued signature, and possibly gain privileges, by leveraging the small key space that results from certain one-byte stream-cipher operations.
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2010-12-02
Last Modified Date: 2018-10-10