GCVE-110-CERTCC-2014-213119

Advisory PublishedCVSS 9.0/10

Vulnetix · Advisory published November 18, 2014

Microsoft Windows Kerberos KDC contains a vulnerability allowing an authenticated unprivileged domain user to escalate privileges to a domain administrator account, allowing the user to compromise any computer on the domain.

Download JSON Open in Console

Risk Scores

CVSS 2.0

9.0/10

Critical · AV:N/AC:L/Au:S/C:C/I:C/A:C

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact4d1_population4d1_direct_report0

certcc-cvss-temporal-env

temporal_score7.4remediation_levelOFreport_confidenceCenvironmental_score8.47927665472target_distributionHenvironmental_vectorCDP:MH/TD:H/CR:ND/IR:ND/AR:ND

Aliases

CVE-2014-6324

Transitive aliases

BDU:2021-04401 CERTFR-2014-ALE-011 GHSA-j28h-3q4c-49h2 GSD-2014-6324 VVD-CISA-2014-6324 VAR-201411-0154

References

Microsoft Windows Kerberos Key Distribution Center (KDC) fails to properly validate Privilege Attribute Certificate (PAC) signature

url

Microsoft Windows Kerberos Key Distribution Center (KDC) fails to properly validate Privilege Attribute Certificate (PAC) signature

advisory

Microsoft Windows Kerberos Key Distribution Center (KDC) fails to properly validate Privilege Attribute Certificate (PAC) signature

advisory

Microsoft Windows Kerberos Key Distribution Center (KDC) fails to properly validate Privilege Attribute Certificate (PAC) signature

advisory

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON