MIT Kerberos 5 'Kadmin protocol' Remote Unauthorized Access Vulnerability

Bugtraq ID:	54751
Class:	Design Error
CVE:	CVE-2012-1012
Remote:	Yes
Local:	No
Published:	Jul 31 2012 12:00AM
Updated:	Jul 31 2012 12:00AM
Credit:	Reported by the vendor
Vulnerable:	Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 11.10 i386 Ubuntu Ubuntu Linux 11.10 amd64 Ubuntu Ubuntu Linux 11.04 powerpc Ubuntu Ubuntu Linux 11.04 i386 Ubuntu Ubuntu Linux 11.04 ARM Ubuntu Ubuntu Linux 11.04 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 MIT Kerberos 5 1.10.1
Not Vulnerable:	MIT Kerberos 5 1.10.2

MIT Kerberos 5 'Kadmin protocol' Remote Unauthorized Access Vulnerability

MIT Kerberos 5 is prone to a remote unauthorized access vulnerability.

Attackers can exploit this issue to obtain or modify sensitive information that may aid in launching further attacks.

MIT Kerberos 5 1.10.1 is vulnerable; other versions may also be affected.

MIT Kerberos 5 'Kadmin protocol' Remote Unauthorized Access Vulnerability

An attacker can exploit these issues with readily available tools.

MIT Kerberos 5 'Kadmin protocol' Remote Unauthorized Access Vulnerability

Solution:
Updates are available. Please see the references for more information.

MIT Kerberos 5 'Kadmin protocol' Remote Unauthorized Access Vulnerability

References:

• Kerberos Homepage (MIT)
  
• Bug 796438 - (CVE-2012-1012) CVE-2012-1012 krb5: flaw in access control handling (Red Hat)