CVE-2010-0035

Published: Feb 10, 2010Modified: Apr 29, 2026

6.3

Vector

AV:N/AC:M/Au:S/C:N/I:N/A:C

Exploitability: 6.8 / Impact: 6.9

Source: NVD

Description

The Key Distribution Center (KDC) in Kerberos in Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold and SP2, when a trust relationship with a non-Windows Kerberos realm exists, allows remote authenticated users to cause a denial of service (NULL pointer dereference and domain controller outage) via a crafted Ticket Granting Ticket (TGT) renewal request, aka "Kerberos Null Pointer Dereference Vulnerability."

Affected (4)

Products: Microsoft: Windows 2000, Windows Server 2003, Windows Server 2008

3 products

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 2000	All versions
Microsoft Windows Server 2003	All versions
Microsoft Windows Server 2008	All versions
Microsoft Windows Server 2008	All versions

References (6)

http://www.us-cert.gov/cas/techalerts/TA10-040A.html

Source: secure@microsoft.com

US Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-014

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8428

Source: secure@microsoft.com

http://www.us-cert.gov/cas/techalerts/TA10-040A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-014

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8428

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.