Microsoft Windows Kerberos 'Pass The Ticket' Replay Security Bypass Vulnerability
BID:42435
Info
Microsoft Windows Kerberos 'Pass The Ticket' Replay Security Bypass Vulnerability
| Bugtraq ID: | 42435 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 13 2010 12:00AM |
| Updated: | Aug 13 2010 12:00AM |
| Credit: | Emmanuel Bouillon |
| Vulnerable: |
Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Professional SP2 Microsoft Windows XP Media Center Edition SP2 Microsoft Windows XP Home SP2 Microsoft Windows XP Embedded SP2 Microsoft Windows Vista Ultimate SP1 Microsoft Windows Vista SP1 Microsoft Windows Vista Home Premium SP1 Microsoft Windows Vista Home Basic SP1 Microsoft Windows Vista Enterprise SP1 Microsoft Windows Vista Business SP1 Microsoft Windows 7 XP Mode 0 Microsoft Windows 7 Ultimate 0 Microsoft Windows 7 Starter 0 Microsoft Windows 7 Professional 0 Microsoft Windows 7 Home Premium 0 Microsoft Windows 7 for x64-based Systems 0 Microsoft Windows 7 for Itanium-based Systems 0 Microsoft Windows 7 for 32-bit Systems 0 Microsoft Windows 7 RC Microsoft Windows 7 beta Microsoft Windows 7 |
| Not Vulnerable: | |
Exploit / POC
Microsoft Windows Kerberos 'Pass The Ticket' Replay Security Bypass Vulnerability
An attacker can carry out this attack using readily available network utilties and also requires physical access to the affected computer.
The following exploit code is available:
An attacker can carry out this attack using readily available network utilties and also requires physical access to the affected computer.
The following exploit code is available: