Lucene search
PRIOn knowledge basePRION:CVE-2014-6324HistoryNov 18, 2014 - 11:59 p.m.
Code injection
2014-11-1823:59:00
PRIOn knowledge base
www.prio-n.com
7
The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote authenticated domain users to obtain domain administrator privileges via a forged signature in a ticket, as exploited in the wild in November 2014, aka “Kerberos Checksum Vulnerability.”
| CPE | Name | Operator | Version |
|---|---|---|---|
| windows_server_2008 | eq | r2 sp1 | |
| windows_server_2012 | eq | 2.0.114 | |
| windows_vista | eq | - sp2 |
References
blogs.technet.com/b/srd/archive/2014/11/18/additional-information-about-cve-2014-6324.aspx
secunia.com/advisories/62556
www.securityfocus.com/bid/70958
www.securitytracker.com/id/1031237
www.us-cert.gov/ncas/alerts/TA14-323A
docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-068
marc.info/?l=bugtraq&m=142350249315918&w=2
Related
openvas
openvas
symantec
symantec
canvas
canvas
Immunity Canvas: MS14_068
2014-11-18 23:59:00
zdt
zdt
Windows Kerberos - Elevation of Privilege (MS14-068) Exploit
2014-12-09 00:00:00
cisa_kev
cisa_kev
nvd
nvd
CVE-2014-6324
2014-11-18 23:59:02
huawei
huawei
cve
cve
CVE-2014-6324
2014-11-18 23:59:02
cert
cert
thn
thn
Microsoft Releases Emergency Out-of-Band Patch for Kerberos Bug MS14-068
2014-11-18 19:20:00
msrc
msrc
Additional information about CVE-2014-6324
2014-11-18 08:00:00
seebug
seebug
nessus
nessus
threatpost
threatpost
Microsoft to Release Critical Out-of-Band Windows Patch
2014-11-18 10:25:35
Duqu Resurfaces With New Round of Victims, Including Kaspersky Lab
2015-06-10 08:05:55
attackerkb
attackerkb
CVE-2014-6324 - Microsoft Kerberos Checksum Validation Vulnerability
2014-11-18 00:00:00
checkpoint_advisories
checkpoint_advisories
metasploit
metasploit
MS14-068 Microsoft Kerberos Checksum Validation Vulnerability
2014-12-22 20:29:02
cvelist
cvelist
CVE-2014-6324
2014-11-18 23:00:00
exploitdb
exploitdb
HackBack - A DIY Guide
2016-04-17 00:00:00
rapid7community
rapid7community
The Shadow Brokers Leaked Exploits Explained
2017-04-18 20:50:20
kaspersky
kaspersky
KLA10601 Multiple vulnerabilities in Microsoft products
2014-11-11 00:00:00
trendmicroblog
trendmicroblog