CVE-2010-1323
Fixed in a distro release EPSS 3%
MIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center (KDC), or forge a KRB-SAFE message via certain checksums that (1) are unkeyed or (2) use RC4 keys.
Products: mit kerberos, mit kerberos_5
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | krb5 | 1.8.3+dfsg-3 |
| Debian 13 | krb5 | 1.8.3+dfsg-3 |
| Debian 14 | krb5 | 1.8.3+dfsg-3 |
| Debian 5.0 | krb5 | 1.6.dfsg.4~beta1-5lenny6 |
| Red Hat Enterprise Linux 4 | krb5 | 0:1.3.4-62.el4_8.3 |
| Red Hat Enterprise Linux 4 | krb5-debuginfo | 0:1.3.4-62.el4_8.3 |
| Red Hat Enterprise Linux 4 | krb5-devel | 0:1.3.4-62.el4_8.3 |
| Red Hat Enterprise Linux 4 | krb5-libs | 0:1.3.4-62.el4_8.3 |
| Red Hat Enterprise Linux 4 | krb5-server | 0:1.3.4-62.el4_8.3 |
| Red Hat Enterprise Linux 4 | krb5-workstation | 0:1.3.4-62.el4_8.3 |
| Red Hat Enterprise Linux 5 | krb5 | 0:1.6.1-36.el5_5.6 |
| Red Hat Enterprise Linux 5 | krb5-debuginfo | 0:1.6.1-36.el5_5.6 |
| Red Hat Enterprise Linux 5 | krb5-devel | 0:1.6.1-36.el5_5.6 |
| Red Hat Enterprise Linux 5 | krb5-libs | 0:1.6.1-36.el5_5.6 |
| Red Hat Enterprise Linux 5 | krb5-server | 0:1.6.1-36.el5_5.6 |
| Red Hat Enterprise Linux 5 | krb5-workstation | 0:1.6.1-36.el5_5.6 |
| Red Hat Enterprise Linux 6 | krb5 | 0:1.8.2-3.el6_0.3 |
| Red Hat Enterprise Linux 6 | krb5-debuginfo | 0:1.8.2-3.el6_0.3 |
| Red Hat Enterprise Linux 6 | krb5-devel | 0:1.8.2-3.el6_0.3 |
| Red Hat Enterprise Linux 6 | krb5-libs | 0:1.8.2-3.el6_0.3 |
| Red Hat Enterprise Linux 6 | krb5-pkinit-openssl | 0:1.8.2-3.el6_0.3 |
| Red Hat Enterprise Linux 6 | krb5-server | 0:1.8.2-3.el6_0.3 |
| Red Hat Enterprise Linux 6 | krb5-server-ldap | 0:1.8.2-3.el6_0.3 |
| Red Hat Enterprise Linux 6 | krb5-workstation | 0:1.8.2-3.el6_0.3 |
| openSUSE Tumbleweed | krb5 | 1.15-1.1 |