Back to KEVs

CVE-2014-6324

The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7...

Basic Information

CVE State
PUBLISHED
Reserved Date
September 11, 2014
Published Date
November 18, 2014
Last Updated
February 10, 2025
Vendor
Microsoft
Product
Windows
Description
The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote authenticated domain users to obtain domain administrator privileges via a forged signature in a ticket, as exploited in the wild in November 2014, aka "Kerberos Checksum Vulnerability."
Tags
windows cisa

CVSS Scores

CVSS v3.1

8.8 - HIGH

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

9.0

Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C

SSVC Information

Exploitation
active
Technical Impact
total

Exploit Status

Exploited in the Wild
Yes (2022-03-25 00:00:00 UTC) Source

References

http://www.securitytracker.com/id/1031237 http://marc.info/?l=bugtraq&m=142350249315918&w=2 http://blogs.technet.com/b/srd/archive/2014/11/18/additional-information-about-cve-2014-6324.aspx http://www.securityfocus.com/bid/70958 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-068 http://marc.info/?l=bugtraq&m=142350249315918&w=2 http://www.us-cert.gov/ncas/alerts/TA14-323A http://secunia.com/advisories/62556

Known Exploited Vulnerability Information

Source Added Date
CISA 2022-03-25 00:00:00 UTC

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Added to KEVIntel