Description
Kerberos in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 supports weak hashing algorithms, which allows local users to gain privileges by operating a service that sends crafted service tickets, as demonstrated by the CRC32 algorithm, aka "Kerberos Unkeyed Checksum Vulnerability."
References
- http://support.avaya.com/css/P8/documents/100127250
- 43251 third-party-advisory
- ms-kerberos-checksum-privilege-escalation(64900) vdb-entry
- oval:org.mitre.oval:def:12432 vdb-entry signature
- MS11-013 vendor-advisory
- ADV-2011-0326 vdb-entry
- 70834 vdb-entry
- 1025048 vdb-entry
- 46130 vdb-entry