CVE-2010-4020 — Kerberos 5 vulnerability

CWE-3108 documents8 sources
Severity
6.3MEDIUMNVD
EPSS
0.5%
top 32.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
MIT Krb5MIT Kerberos 5
Timeline
PublishedDec 2
Latest updateMay 13

Description

MIT Kerberos 5 (aka krb5) 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which might allow remote authenticated users to forge a (1) AD-SIGNEDPATH or (2) AD-KDC-ISSUED signature, and possibly gain privileges, by leveraging the small key space that results from certain one-byte stream-cipher operations.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LExploitability: 2.8 | Impact: 3.4

Affected Packages2 packages

▶Debianmit/krb5< 1.8.3+dfsg-3+3
▶NVDmit/kerberos_54 versions+3

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-27hw-qqm8-6prm: MIT Kerberos 5 (aka krb5) 1↗2022-05-13
▶
CVEList
CVE-2010-4020: MIT Kerberos 5 (aka krb5) 1↗2010-12-02
▶
OSV
CVE-2010-4020: MIT Kerberos 5 (aka krb5) 1↗2010-12-02
▶

📋Vendor Advisories

3
Ubuntu
Kerberos vulnerabilities↗2010-12-09
▶
Red Hat
krb5: krb5 may accept authdata checksums with low-entropy derived keys (MITKRB5-SA-2010-007)↗2010-11-30
▶
Debian
CVE-2010-4020: krb5 - MIT Kerberos 5 (aka krb5) 1.8.x through 1.8.3 does not reject RC4 key-derivation...↗2010
▶

💬Community

1
Bugzilla
CVE-2010-4020 krb5: krb5 may accept authdata checksums with low-entropy derived keys (MITKRB5-SA-2010-007)↗2010-11-02
▶
CVE-2010-4020 — MIT Kerberos 5 vulnerability | cvebase