CVE-2012-1012 in Kerberos
要約
〜によって MITRE
server/server_stubs.c in the kadmin protocol implementation in MIT Kerberos 5 (aka krb5) 1.10 before 1.10.1 does not properly restrict access to (1) SET_STRING and (2) GET_STRINGS operations, which might allow remote authenticated administrators to modify or read string attributes by leveraging the global list privilege.
If you want to get best quality of vulnerability data, you may have to visit VulDB.