VDB

GCVE-110-MAGEIA-2014-477

GCVE-110-MAGEIA-2014-477
Advisory Published
Vulnetix · Advisory published November 21, 2014
The kadm5_randkey_principal_3 function in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13 sends old keys in a response to a -randkey -keepold request, which allows remote authenticated users to forge tickets by leveraging administrative access (CVE-2014-5351).
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiakrb50 (affected), 1.11.4-1.2.mga4 (unaffected)—
Mageiakrb50 (affected), 1.11.1-1.5.mga3 (unaffected)—

Aliases

CVE-2014-5351

References

Updated krb5 packages fix security vulnerability
advisory
Updated krb5 packages fix security vulnerability
issue
Updated krb5 packages fix security vulnerability
issue

Browse GCVE Records

72,664 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›