Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MIT krb5 输入验证错误漏洞
Vulnerability Description
MIT krb5（又名MIT Kerberos 5）是美国麻省理工（Massachusetts Institute of Technology）学院的一套网络认证协议，它采用客户端/服务器结构，并且客户端和服务器端均可对对方进行身份认证（即双重验证），可防止窃听、防止replay攻击等。 MIT Kerberos 5 1.7及之后的版本中存在输入验证错误漏洞。攻击者可通过发送无效的S4U2Self或S4U2Proxy请求利用该漏洞造成KDC断言失败。
CVSS Information
N/A
Vulnerability Type
N/A