CVE-2010-4021: Low severity kerberos vulnerability
The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 does not properly restrict the use of TGT credentials for armoring TGS requests, which might allow remote authenticated users to impersonate a client by rewriting an inner request, aka a "KrbFastReq forgery issue."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4021?
CVE-2010-4021 has a moderate severity level as it allows remote authenticated users to potentially impersonate clients.
How do I fix CVE-2010-4021?
To fix CVE-2010-4021, upgrade to a patched version of MIT Kerberos 5 that resolves the TGT credential restriction issue.
Who is affected by CVE-2010-4021?
CVE-2010-4021 affects all users of MIT Kerberos 5 version 1.7.
What type of attack does CVE-2010-4021 facilitate?
CVE-2010-4021 facilitates impersonation attacks where an attacker can rewrite an inner request to act as a legitimate client.
Is CVE-2010-4021 exploitable without authentication?
No, CVE-2010-4021 is only exploitable by remote authenticated users with access to the vulnerable MIT Kerberos 5 service.