Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMicrosoftCVE-2014-6324
HistoryNov 18, 2014 - 11:59 p.m.

CVE-2014-6324

2014-11-1823:59:02
microsoft
web.nvd.nist.gov
897
In Wild
2
kerberos
kdc
microsoft
windows
vulnerability
security
admin privilege
cve-2014-6324

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

5.9

Confidence

Low

EPSS

0.961

Percentile

99.5%

JSON

The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote authenticated domain users to obtain domain administrator privileges via a forged signature in a ticket, as exploited in the wild in November 2014, aka “Kerberos Checksum Vulnerability.”

Affected configurations

Nvd
Node
microsoftwindows_7Match-sp1
OR
microsoftwindows_8Match-
OR
microsoftwindows_8.1Match-
OR
microsoftwindows_server_2003Match-sp2
OR
microsoftwindows_server_2008Match-sp2
OR
microsoftwindows_server_2008Matchr2sp1itanium
OR
microsoftwindows_server_2008Matchr2sp1x64
OR
microsoftwindows_server_2012Match-
OR
microsoftwindows_server_2012Matchr2
VendorProductVersionCPE
microsoftwindows_7-cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
microsoftwindows_8-cpe:2.3:o:microsoft:windows_8:-:*:*:*:*:*:*:*
microsoftwindows_8.1-cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
microsoftwindows_server_2003-cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*
microsoftwindows_server_2008-cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
microsoftwindows_server_2008r2cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*
microsoftwindows_server_2008r2cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
microsoftwindows_server_2012-cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
microsoftwindows_server_2012r2cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*

Social References

More

Related

openvas 1
canvas 1
zdt 1
symantec 1
nvd 1
cisa_kev 1
exploitdb 2
huawei 1
msrc 1
packetstorm 1
cert 1
seebug 1
thn 1
checkpoint_advisories 1
prion 1
metasploit 1
attackerkb 1
threatpost 2
cvelist 1
nessus 1
rapid7community 1
kaspersky 1
trendmicroblog 1
openvas
openvas
Microsoft Windows Kerberos Checksum Remote Privilege Escalation Vulnerability (3011780)
2014-11-19 00:00:00
canvas
canvas
Immunity Canvas: MS14_068
2014-11-18 23:59:00
zdt
zdt
Windows Kerberos - Elevation of Privilege (MS14-068) Exploit
2014-12-09 00:00:00
symantec
symantec
Microsoft Windows Kerberos Checksum CVE-2014-6324 Remote Privilege Escalation Vulnerability
2014-11-11 00:00:00
nvd
nvd
CVE-2014-6324
2014-11-18 23:59:02
cisa_kev
cisa_kev
Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability
2022-03-25 00:00:00
exploitdb
exploitdb
Microsoft Windows Kerberos - Privilege Escalation (MS14-068)
2014-12-05 00:00:00
HackBack - A DIY Guide
2016-04-17 00:00:00
huawei
huawei
Security Advisory - Privilege Elevation Vulnerability in Microsoft Windows Kerberos Key Distribution Center
2020-09-09 00:00:00
msrc
msrc
Additional information about CVE-2014-6324
2014-11-18 08:00:00
packetstorm
packetstorm
MS14-068 Microsoft Kerberos Checksum Validation
2024-08-31 00:00:00
cert
cert
Microsoft Windows Kerberos Key Distribution Center (KDC) fails to properly validate Privilege Attribute Certificate (PAC) signature
2014-11-18 00:00:00
seebug
seebug
ESKIMOROLL-ms14-068 Windows vulnerability in the Key Distribution Center (KDC) service (CVE-2014-6324)
2017-04-15 00:00:00
thn
thn
Microsoft Releases Emergency Out-of-Band Patch for Kerberos Bug MS14-068
2014-11-18 19:20:00
checkpoint_advisories
checkpoint_advisories
Microsoft Windows Kerberos KDC Elevation of Privilege (MS14-068; CVE-2014-6324)
2014-11-19 00:00:00
prion
prion
Code injection
2014-11-18 23:59:00
metasploit
metasploit
MS14-068 Microsoft Kerberos Checksum Validation Vulnerability
2014-12-22 20:29:02
attackerkb
attackerkb
CVE-2014-6324 - Microsoft Kerberos Checksum Validation Vulnerability
2014-11-18 00:00:00
threatpost
threatpost
Microsoft to Release Critical Out-of-Band Windows Patch
2014-11-18 10:25:35
Duqu Resurfaces With New Round of Victims, Including Kaspersky Lab
2015-06-10 08:05:55
cvelist
cvelist
CVE-2014-6324
2014-11-18 23:00:00
nessus
nessus
MS14-068: Vulnerability in Kerberos Could Allow Elevation of Privilege (3011780) (ESKIMOROLL)
2014-11-18 00:00:00
rapid7community
rapid7community
The Shadow Brokers Leaked Exploits Explained
2017-04-18 20:50:20
kaspersky
kaspersky
KLA10601 Multiple vulnerabilities in Microsoft products
2014-11-11 00:00:00
trendmicroblog
trendmicroblog
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of April 17, 2017
2017-04-21 18:23:45

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

5.9

Confidence

Low

EPSS

0.961

Percentile

99.5%

JSON
Related for CVE-2014-6324
openvas1canvas1zdt1symantec1nvd1cisa_kev1exploitdb2huawei1msrc1packetstorm1cert1seebug1thn1checkpoint_advisories1prion1metasploit1attackerkb1threatpost2cvelist1nessus1rapid7community1kaspersky1trendmicroblog1