CVE-2014-6324: Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability
The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote authenticated domain users to obtain domain administrator privileges via a forged signature in a ticket, as exploited in the wild in November 2014, aka "Kerberos Checksum Vulnerability."
Other sources
The Kerberos Key Distribution Center (KDC) in Microsoft allows remote authenticated domain users to obtain domain administrator privileges.
— CISA
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-6324?
CVE-2014-6324 is classified as a high severity vulnerability due to its potential to allow remote authenticated domain users to gain domain administrator privileges.
How do I fix CVE-2014-6324?
To fix CVE-2014-6324, apply the latest security updates and patches provided by Microsoft for affected versions of Windows.
Which products are affected by CVE-2014-6324?
CVE-2014-6324 affects multiple Microsoft products including Windows Server 2003, Windows Vista, Windows 7, Windows 8, Windows 8.1, and Windows Server 2012.
What is the attack vector for CVE-2014-6324?
The attack vector for CVE-2014-6324 is remote authentication, allowing domain users to exploit the vulnerability without local access.
What are the potential impacts of CVE-2014-6324?
The potential impacts of CVE-2014-6324 include unauthorized elevation of privileges, which could lead to extensive control over the domain environment.