CVE-2014-5351

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 versions prior to 1.13

Description The issue allows remote authenticated users to forge tickets by leveraging administrative access. This is due to the kadm5 randkey principal 3 function in lib/kadm5/srv/svr principal.c in kadmind sending old keys in a response to a -randkey -keepold request. The exploitation of this issue may lead to a violation of confidentiality, integrity, and availability of protected information.

Recommendations For versions prior to 1.13, update to version 1.13 or later to resolve the issue. As a temporary workaround, consider restricting access to the kadmind service to minimize the risk of exploitation. Avoid using the -randkey -keepold request in the affected kadmind service until the issue is resolved.