imPC@ndo IT

Tracker / CVE-2014-6324

CVE-2014-6324

Exploited High 8.8

The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote authenticated domain users to obtain domain administrator privileges via a forged signature in a ticket, as exploited in the wild in November 2014, aka "Kerberos Checksum Vulnerability."

Affected products and versions

microsoft windows_7
microsoft windows_8
microsoft windows_8.1
microsoft windows_server_2003
microsoft windows_server_2008
microsoft windows_server_2012

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References