Oval Definition:	oval:org.mitre.oval:def:12432
Revision Date: 2011-08-15 Version: 47 Title: Kerberos Unkeyed Checksum Vulnerability Description: Kerberos in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 supports weak hashing algorithms, which allows local users to gain privileges by operating a service that sends crafted service tickets, as demonstrated by the CRC32 algorithm, aka "Kerberos Unkeyed Checksum Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2011-0043 Platform(s): Microsoft Windows Server 2003 Microsoft Windows XP Product(s): Definition Synopsis Vulnerable Microsoft Windows XP x86 SP3 Microsoft Windows XP (x86) SP3 is installed AND the version of kerberos.dll is less than 5.1.2600.6059 OR Vulnerable Microsoft Windows XP x64 SP2, Server 2003 x86/x64/ia64 SP2 Affected operating systems: Windows XP x64 SP2, Server 2003 x86/x64/ia64 SP2 Microsoft Windows XP x64 Edition SP2 is installed OR Microsoft Windows Server 2003 SP2 (x64) is installed OR Microsoft Windows Server 2003 SP2 (x86) is installed OR Microsoft Windows Server 2003 (ia64) SP2 is installed AND the version of kerberos.dll is less than 5.2.3790.4806
BACK