CVE-2011-0043

Published: Feb 10, 2011Modified: Apr 29, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Kerberos in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 supports weak hashing algorithms, which allows local users to gain privileges by operating a service that sends crafted service tickets, as demonstrated by the CRC32 algorithm, aka "Kerberos Unkeyed Checksum Vulnerability."

Affected (5)

Products: Microsoft: Windows 2003 Server, Windows Server 2003, Windows Xp

3 products

Windows 2003 Server

Windows Server 2003

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 2003 Server	All versions
Microsoft Windows 2003 Server	All versions
Microsoft Windows Server 2003	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions

Related CWEs

References (18)

http://osvdb.org/70834

Source: secure@microsoft.com

http://secunia.com/advisories/43251

Source: secure@microsoft.com

Vendor Advisory

http://support.avaya.com/css/P8/documents/100127250

Source: secure@microsoft.com

http://www.securityfocus.com/bid/46130

Source: secure@microsoft.com

http://www.securitytracker.com/id?1025048

Source: secure@microsoft.com

http://www.vupen.com/english/advisories/2011/0326

Source: secure@microsoft.com

Vendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-013

Source: secure@microsoft.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/64900

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12432

Source: secure@microsoft.com

http://osvdb.org/70834

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/43251

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://support.avaya.com/css/P8/documents/100127250

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/46130

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1025048

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0326

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-013

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/64900

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12432

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.