CVE-2014-6324

Known Exploited Vulnerability

Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability

Vendor / product: Microsoft / Kerberos Key Distribution Center (KDC)

Description

The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote authenticated domain users to obtain domain administrator privileges via a forged signature in a ticket, as exploited in the wild in November 2014, aka "Kerberos Checksum Vulnerability."

Primary references

• secure@microsoft.com — Not Applicable, Vendor Advisory
• secure@microsoft.com — Mailing List, Third Party Advisory
• secure@microsoft.com — Broken Link
• secure@microsoft.com — Broken Link, Third Party Advisory, VDB Entry
• secure@microsoft.com — Broken Link, Third Party Advisory, VDB Entry
• secure@microsoft.com — Third Party Advisory, US Government Resource
• secure@microsoft.com — Patch, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Not Applicable, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Broken Link
• af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Third Party Advisory, VDB Entry