cve.bz

CVE-2010-1324

3.7 lowEPSS 2.3%

Low (3.7) in mit kerberos 5. EPSS 2.3% chance of exploitation in the next 30 days.

MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to forge GSS tokens, gain privileges, or have unspecified other impact via (1) an unkeyed checksum, (2) an unkeyed PAC checksum, or (3) a KrbFastArmoredReq checksum based on an RC4 key.

Severity

CVSS 3.0

3.7 low
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS
2.3% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
CWE
CWE-310
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON