CVE-2012-1012

server/server_stubs.c in the kadmin protocol implementation in MIT Kerberos 5 (aka krb5) 1.10 before 1.10.1 does not properly restrict access to (1) SET_STRING…

published June 7, 2012

CVSS
—
EPSS
1%
Percentile
68.0
In the wild
Unconfirmed
What it is

server/server_stubs.c in the kadmin protocol implementation in MIT Kerberos 5 (aka krb5) 1.10 before 1.10.1 does not properly restrict access to (1) SET_STRING and (2) GET_STRINGS operations, which might allow remote authenticated administrators to modify or read string attributes by leveraging the global list privilege.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01208 · 68.0th percentile
Published
2012-06-07T19:00Z
EPSS history
Timeline
  • 07 JUN 19:00Z
    server/server_stubs.c in the kadmin protocol implementation in MIT Kerberos 5 (aka krb5) 1.10 before 1.10.1 does not properly restrict access to (1) SET_STRING…
    cvelistv5