CVE ID:	CVE-2010-1324
Description:	MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to forge GSS tokens, gain privileges, or have unspecified other impact via (1) an unkeyed checksum, (2) an unkeyed PAC checksum, or (3) a KrbFastArmoredReq checksum based on an RC4 key.
Test IDs:	1.3.6.1.4.1.25623.1.0.68644   1.3.6.1.4.1.25623.1.0.68693   1.3.6.1.4.1.25623.1.0.68694   1.3.6.1.4.1.25623.1.0.68645
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-1324 http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html BugTraq ID: 45116 http://www.securityfocus.com/bid/45116 Bugtraq: 20101130 MITKRB5-SA-2010-007 Multiple checksum handling vulnerabilities [CVE-2010-1324 CVE-2010-1323 CVE-2010-4020 CVE-2010-4021] (Google Search) http://www.securityfocus.com/archive/1/514953/100/0/threaded Bugtraq: 20110428 VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console (Google Search) http://www.securityfocus.com/archive/1/517739/100/0/threaded http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051976.html http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051999.html HPdes Security Advisory: HPSBUX02623 http://marc.info/?l=bugtraq&m=129562442714657&w=2 HPdes Security Advisory: SSRT100355 http://marc.info/?l=bugtraq&m=129562442714657&w=2 http://www.mandriva.com/security/advisories?name=MDVSA-2010:246 http://lists.vmware.com/pipermail/security-announce/2011/000133.html http://osvdb.org/69609 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11936 RedHat Security Advisories: RHSA-2010:0925 http://www.redhat.com/support/errata/RHSA-2010-0925.html http://www.securitytracker.com/id?1024803 http://secunia.com/advisories/42399 http://secunia.com/advisories/43015 SuSE Security Announcement: SUSE-SR:2010:023 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html SuSE Security Announcement: SUSE-SR:2010:024 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html http://www.ubuntu.com/usn/USN-1030-1 http://www.vupen.com/english/advisories/2010/3094 http://www.vupen.com/english/advisories/2010/3095 http://www.vupen.com/english/advisories/2010/3118 http://www.vupen.com/english/advisories/2011/0187