{"schemaVersion":3,"id":"CVE-2010-1324","aliases":["DEBIAN-CVE-2010-1324"],"status":"published","duplicateOf":null,"title":null,"description":"MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to forge GSS tokens, gain privileges, or have unspecified other impact via (1) an unkeyed checksum, (2) an unkeyed PAC checksum, or (3) a KrbFastArmoredReq checksum based on an RC4 key.","dates":{"published":"2010-12-02T16:00:00.000Z","modified":"2024-08-07T01:21:18.670Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":4.3,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":3.7,"severity":"low","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.3,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Debian","score":3.7,"severity":"low","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","exploitability":5.6,"impact":2.3,"computed":true}]},"epss":{"probability":0.02253,"percentile":0.8277,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":-0.3859999999999999,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.02639},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02639,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.02253,"percentile":0.8277}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.02639,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.02253,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.02253,"percentile":0.8277}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-310","name":"Cryptographic Issues","description":"Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.","type":"category","status":"Draft","abstraction":null,"likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/310.html"}],"affected":[{"vendor":"debian","product":"krb5","name":"krb5","label":"krb5","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/krb5","purlType":"deb","versions":[{"text":"< 1.8.3+dfsg-3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.8.3+dfsg-3","eol":null,"hubHref":null},{"vendor":"mit","product":"kerberos_5","name":"kerberos 5","label":"kerberos_5","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.7","noFixRecorded":false,"fixedIn":null},{"text":"1.7.1","noFixRecorded":false,"fixedIn":null},{"text":"1.8","noFixRecorded":false,"fixedIn":null},{"text":"1.8.1","noFixRecorded":false,"fixedIn":null},{"text":"1.8.2","noFixRecorded":false,"fixedIn":null},{"text":"1.8.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.7 | 1.7.1 | 1.8 | 1.8.1 | 1.8.2 | 1.8.3","eol":null,"hubHref":"/vendor/mit/kerberos_5"}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.vupen.com/english/advisories/2010/3094","label":"www.vupen.com/english/advisories/2010/3094","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","label":"www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","hostname":"www.oracle.com","tags":["X Refsource CONFIRM","Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:246","label":"www.mandriva.com/security/advisories?name=MDVSA-2010:246","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051999.html","label":"lists.fedoraproject.org/pipermail/package-announce/2010-December/051999.html","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"http://kb.vmware.com/kb/1035108","label":"kb.vmware.com/kb/1035108","hostname":"kb.vmware.com","tags":["X Refsource CONFIRM"]},{"url":"http://www.vupen.com/english/advisories/2010/3118","label":"www.vupen.com/english/advisories/2010/3118","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11936","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11936","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL"]},{"url":"http://www.vupen.com/english/advisories/2011/0187","label":"www.vupen.com/english/advisories/2011/0187","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.securityfocus.com/archive/1/514953/100/0/threaded","label":"www.securityfocus.com/archive/1/514953/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html","label":"lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0007.html","label":"www.vmware.com/security/advisories/VMSA-2011-0007.html","hostname":"www.vmware.com","tags":["X Refsource CONFIRM"]},{"url":"http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html","label":"lists.apple.com/archives/security-announce/2011/Mar/msg00006.html","hostname":"lists.apple.com","tags":["Vendor Advisory","X Refsource APPLE"]},{"url":"http://osvdb.org/69609","label":"osvdb.org/69609","hostname":"osvdb.org","tags":["VDB Entry","X Refsource OSVDB"]},{"url":"http://marc.info/?l=bugtraq&m=129562442714657&w=2","label":"marc.info?l=bugtraq&m=129562442714657&w=2","hostname":"marc.info","tags":["Vendor Advisory","X Refsource HP"]},{"url":"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-007.txt","label":"web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-007.txt","hostname":"web.mit.edu","tags":["X Refsource CONFIRM","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3095","label":"www.vupen.com/english/advisories/2010/3095","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://secunia.com/advisories/42399","label":"secunia.com/advisories/42399","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/45116","label":"www.securityfocus.com/bid/45116","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2011/000133.html","label":"lists.vmware.com/pipermail/security-announce/2011/000133.html","hostname":"lists.vmware.com","tags":["Mailing List","X Refsource MLIST"]},{"url":"http://www.securitytracker.com/id?1024803","label":"www.securitytracker.com/id?1024803","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"http://www.securityfocus.com/archive/1/517739/100/0/threaded","label":"www.securityfocus.com/archive/1/517739/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051976.html","label":"lists.fedoraproject.org/pipermail/package-announce/2010-December/051976.html","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html","label":"lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0925.html","label":"www.redhat.com/support/errata/RHSA-2010-0925.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://www.ubuntu.com/usn/USN-1030-1","label":"www.ubuntu.com/usn/USN-1030-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://secunia.com/advisories/43015","label":"secunia.com/advisories/43015","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://support.apple.com/kb/HT4581","label":"support.apple.com/kb/HT4581","hostname":"support.apple.com","tags":["X Refsource CONFIRM"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2010-1324","label":"security-tracker.debian.org/tracker/CVE-2010-1324","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2024:10004-1","RHSA-2010:0925"],"duplicates":[],"related":["OPENSUSE-SU-2024:10004-1"]},"timeline":[{"kind":"published","date":"2010-12-02T16:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T01:21:18.670Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":18,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T17:37:12.801Z","stale":false,"partial":false}}