CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 5.5
CWE Name:  Permissions Privileges and Access Controls
Summary: server/server_stubs.c in the kadmin protocol implementation in mit kerberos 5 (aka krb5) 1.10 before 1.10.1 does not properly restrict access to (1) set_string and (2) get_strings operations, which might allow remote authenticated administrators to modify or read string attributes by leveraging the global list privilege.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/NONE
Published Date: 2012-06-07
Last Modified Date: 2012-06-12