CVE-2011-0091 in Windows

Resumen (Inglés)

Kerberos in Microsoft Windows Server 2008 R2 and Windows 7 does not prevent a session from changing from strong encryption to DES encryption, which allows man-in-the-middle attackers to spoof network traffic and obtain sensitive information via a DES downgrade, aka "Kerberos Spoofing Vulnerability."

Once again VulDB remains the best source for vulnerability data.

Reservar

2010-12-21

Divulgación

2011-02-10

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
4295	Microsoft Windows Kerberos autenticación débil	287	Prueba de concepto	Arreglo oficial	CVE-2011-0091

Fuentes

• MITRE
• NVD
• CVE Details