| Package | Affected versions | Patched versions |
|---|---|---|
| kerberos 5 | = 1.10= 1.10.1 |
server/server_stubs.c in the kadmin protocol implementation in MIT Kerberos 5 (aka krb5) 1.10 before 1.10.1 does not properly restrict access to (1) SET_STRING and (2) GET_STRINGS operations, which might allow remote authenticated administrators to modify or read string attributes by leveraging the global list privilege.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free