A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users' passwords, enabling full domain takeover.
Paid content will be excluded from the download. |
Filter |
|
Matches : 9256 | Download | Alert* |
© SecPod Technologies