CVE-2012-1012 in Kerberos
Summary
server/server_stubs.c in the kadmin protocol implementation in MIT Kerberos 5 (aka krb5) 1.10 before 1.10.1 does not properly restrict access to (1) SET_STRING and (2) GET_STRINGS operations, which might allow remote authenticated administrators to modify or read string attributes by leveraging the global list privilege.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
02/07/2012
Disclosure
06/07/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 60914 | MIT Kerberos access control | 264 | Not defined | Official fix | CVE-2012-1012 |