Back to search
CVE-2014-6324
Published: Nov 18, 2014
Modified: Oct 22, 2025
PUBLISHED
Description
The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote authenticated domain users to obtain domain administrator privileges via a forged signature in a ticket, as exploited in the wild in November 2014, aka "Kerberos Checksum Vulnerability."
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
1031237
vdb-entry
x_refsource_SECTRACK
HPSBMU03224
vendor-advisory
x_refsource_HP
70958
vdb-entry
x_refsource_BID
MS14-068
vendor-advisory
x_refsource_MS
SSRT101864
vendor-advisory
x_refsource_HP
TA14-323A
third-party-advisory
x_refsource_CERT
62556
third-party-advisory
x_refsource_SECUNIA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now