CVE-2012-1012: Medium severity kerberos vulnerability
It was reported [1] that, within the kadmin protocol, the access controls for getstrings/setstring were insufficient; anyone with global list privileges could get or modify string attributed on any principal.
It was also noted that the exposure depends on how generous the kadmind acl was with list permissions and whether or not string attributes were used in deployment (and noting that nothing in the core code uses them yet).
This has been fixed upstream [2] and in Fedora [3].
[1] http://krbdev.mit.edu/rt/Ticket/Display.html?user=guest&pass=guest&id=7093 [2] http://src.mit.edu/fisheye/changelog/krb5/?cs=25704 [3] http://koji.fedoraproject.org/koji/buildinfo?buildID=300840
Other sources
server/serverstubs.c in the kadmin protocol implementation in MIT Kerberos 5 (aka krb5) 1.10 before 1.10.1 does not properly restrict access to (1) SETSTRING and (2) GETSTRINGS operations, which might allow remote authenticated administrators to modify or read string attributes by leveraging the global list privilege.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1012?
The severity of CVE-2012-1012 is considered moderate due to insufficient access controls within the kadmin protocol.
How do I fix CVE-2012-1012?
To fix CVE-2012-1012, it is recommended to update to a patched version of MIT Kerberos 5 that addresses the access control issues.
How does CVE-2012-1012 affect affected users?
CVE-2012-1012 allows users with global list privileges to view or modify string attributes of any principal, potentially compromising data integrity.
Which versions of MIT Kerberos 5 are affected by CVE-2012-1012?
CVE-2012-1012 affects MIT Kerberos 5 versions 1.10 and 1.10.1.
Is there an exploit available for CVE-2012-1012?
Currently, there are no public exploits specifically reported for CVE-2012-1012, but the vulnerability itself poses a significant risk if access controls are weak.