CVE-2010-4020: Medium severity kerberos vulnerability
MIT Kerberos 5 (aka krb5) 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which might allow remote authenticated users to forge a (1) AD-SIGNEDPATH or (2) AD-KDC-ISSUED signature, and possibly gain privileges, by leveraging the small key space that results from certain one-byte stream-cipher operations.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4020?
CVE-2010-4020 is considered a medium severity vulnerability due to the potential for privilege escalation through forged signatures.
How do I fix CVE-2010-4020?
To fix CVE-2010-4020, upgrade MIT Kerberos 5 to a version later than 1.8.3.
What systems are affected by CVE-2010-4020?
CVE-2010-4020 affects MIT Kerberos 5 versions 1.8, 1.8.1, 1.8.2, and 1.8.3.
What types of attacks can CVE-2010-4020 be exploited for?
CVE-2010-4020 can be exploited to forge AD-SIGNEDPATH or AD-KDC-ISSUED signatures by authenticated remote users.
Is CVE-2010-4020 specific to any particular configuration?
CVE-2010-4020 can occur due to specific weak key configurations in MIT Kerberos 5.