{"schemaVersion":3,"id":"CVE-2010-4020","aliases":["DEBIAN-CVE-2010-4020"],"status":"published","duplicateOf":null,"title":null,"description":"MIT Kerberos 5 (aka krb5) 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which might allow remote authenticated users to forge a (1) AD-SIGNEDPATH or (2) AD-KDC-ISSUED signature, and possibly gain privileges, by leveraging the small key space that results from certain one-byte stream-cipher operations.","dates":{"published":"2010-12-02T16:00:00.000Z","modified":"2024-08-07T03:26:12.249Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.3,"severity":"medium","version":"3.0","versionLabel":"v3.0","source":"NVD","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":6.3,"severity":"medium","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":3.5,"severity":"low","vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Debian","score":6.3,"severity":"medium","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","exploitability":7.2,"impact":5.7,"computed":true}]},"epss":{"probability":0.01916,"percentile":0.7957,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.01916},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02059,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.01916,"percentile":0.7957}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02059,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01916,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.01916,"percentile":0.7957}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-310","name":"Cryptographic Issues","description":"Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.","type":"category","status":"Draft","abstraction":null,"likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/310.html"}],"affected":[{"vendor":"debian","product":"krb5","name":"krb5","label":"krb5","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/krb5","purlType":"deb","versions":[{"text":"< 1.8.3+dfsg-3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.8.3+dfsg-3","eol":null,"hubHref":null},{"vendor":"mit","product":"kerberos_5","name":"kerberos 5","label":"kerberos_5","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.8","noFixRecorded":false,"fixedIn":null},{"text":"1.8.1","noFixRecorded":false,"fixedIn":null},{"text":"1.8.2","noFixRecorded":false,"fixedIn":null},{"text":"1.8.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.8 | 1.8.1 | 1.8.2 | 1.8.3","eol":null,"hubHref":"/vendor/mit/kerberos_5"}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.vupen.com/english/advisories/2010/3094","label":"www.vupen.com/english/advisories/2010/3094","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","label":"www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","hostname":"www.oracle.com","tags":["X Refsource CONFIRM","Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:246","label":"www.mandriva.com/security/advisories?name=MDVSA-2010:246","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051999.html","label":"lists.fedoraproject.org/pipermail/package-announce/2010-December/051999.html","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"http://kb.vmware.com/kb/1035108","label":"kb.vmware.com/kb/1035108","hostname":"kb.vmware.com","tags":["X Refsource CONFIRM"]},{"url":"http://www.vupen.com/english/advisories/2010/3118","label":"www.vupen.com/english/advisories/2010/3118","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.securityfocus.com/archive/1/514953/100/0/threaded","label":"www.securityfocus.com/archive/1/514953/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html","label":"lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0007.html","label":"www.vmware.com/security/advisories/VMSA-2011-0007.html","hostname":"www.vmware.com","tags":["X Refsource CONFIRM"]},{"url":"http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html","label":"lists.apple.com/archives/security-announce/2011/Mar/msg00006.html","hostname":"lists.apple.com","tags":["Vendor Advisory","X Refsource APPLE"]},{"url":"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-007.txt","label":"web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-007.txt","hostname":"web.mit.edu","tags":["X Refsource CONFIRM","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3095","label":"www.vupen.com/english/advisories/2010/3095","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://secunia.com/advisories/42399","label":"secunia.com/advisories/42399","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2011/000133.html","label":"lists.vmware.com/pipermail/security-announce/2011/000133.html","hostname":"lists.vmware.com","tags":["Mailing List","X Refsource MLIST"]},{"url":"http://www.securitytracker.com/id?1024803","label":"www.securitytracker.com/id?1024803","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"http://www.securityfocus.com/archive/1/517739/100/0/threaded","label":"www.securityfocus.com/archive/1/517739/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051976.html","label":"lists.fedoraproject.org/pipermail/package-announce/2010-December/051976.html","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html","label":"lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0925.html","label":"www.redhat.com/support/errata/RHSA-2010-0925.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://www.ubuntu.com/usn/USN-1030-1","label":"www.ubuntu.com/usn/USN-1030-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://osvdb.org/69608","label":"osvdb.org/69608","hostname":"osvdb.org","tags":["VDB Entry","X Refsource OSVDB"]},{"url":"http://www.securityfocus.com/bid/45117","label":"www.securityfocus.com/bid/45117","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"http://support.apple.com/kb/HT4581","label":"support.apple.com/kb/HT4581","hostname":"support.apple.com","tags":["X Refsource CONFIRM"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2010-4020","label":"security-tracker.debian.org/tracker/CVE-2010-4020","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2024:10004-1","RHSA-2010:0925"],"duplicates":[],"related":["OPENSUSE-SU-2024:10004-1"]},"timeline":[{"kind":"published","date":"2010-12-02T16:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T03:26:12.249Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":26,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T11:51:37.841Z","stale":false,"partial":false}}