CVE-2008-3274
The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap://...
The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap:///anyone on the read ACL for the krbMKey attribute, which allows remote attackers to obtain the Kerberos master key via an anonymous LDAP query.
Exploit likelihood
What each source reports
NVD Score used
The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap:///anyone on the read ACL for the krbMKey attribute, which allows remote attackers to obtain the Kerberos master key via an anonymous LDAP query.
- Record
CVE-2008-3274- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap:///anyone on the read ACL for the krbMKey attribute, which allows remote attackers to obtain the Kerberos master key via an anonymous LDAP query.
- Record
CVE-2008-3274- Updated
- 2026-11-02
EUVDEUVD-2008-3262 No score
The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap:///anyone on the read ACL for the krbMKey attribute, which allows remote attackers to obtain the Kerberos master key via an anonymous LDAP query.
- Record
EUVD-2008-3262- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8w34-c24h-wvp3 No score
The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap://...
The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap:///anyone on the read ACL for the krbMKey attribute, which allows remote attackers to obtain the Kerberos master key via an anonymous LDAP query.
- Record
GHSA-8w34-c24h-wvp3- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ipaRed Hat:enterprise_ipa:1.0 |
before 0:1.0.0-23.el5ipa | 0:1.0.0-23.el5ipa |
ipa-admintoolsRed Hat:enterprise_ipa:1.0 |
before 0:1.0.0-23.el5ipa | 0:1.0.0-23.el5ipa |
ipa-clientRed Hat:enterprise_ipa:1.0 |
before 0:1.0.0-23.el5ipa | 0:1.0.0-23.el5ipa |
ipa-debuginfoRed Hat:enterprise_ipa:1.0 |
before 0:1.0.0-23.el5ipa | 0:1.0.0-23.el5ipa |
ipa-pythonRed Hat:enterprise_ipa:1.0 |
before 0:1.0.0-23.el5ipa | 0:1.0.0-23.el5ipa |
ipa-serverRed Hat:enterprise_ipa:1.0 |
before 0:1.0.0-23.el5ipa | 0:1.0.0-23.el5ipa |
ipa-server-selinuxRed Hat:enterprise_ipa:1.0 |
before 0:1.0.0-23.el5ipa | 0:1.0.0-23.el5ipa |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-3274 is a medium vulnerability (CVSS 5.0) in Redhat Enterprise Ipa, published September 12, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.84%, the 79th percentile. Fixed in ipa 0:1.0.0-23.el5ipa.
References
redhat.com/archives/fedora-package-announce/2008-September/msg00733.html
securityfocus.com/bid/31111
freeipa.org/page/News
git.fedorahosted.org/git/freeipa.git?p=freeipa.git%3Ba=commit%3Bh=9932887f2af38b9701efec27707648c026ec445c
bugzilla.redhat.com/show_bug.cgi?id=457835
Show 13 moreShow less
securitytracker.com/id?1020850
secunia.com/advisories/31861
rhn.redhat.com/errata/RHSA-2008-0860.html
nvd.nist.gov/vuln/detail/CVE-2008-3274
github.com/advisories/GHSA-8w34-c24h-wvp3
access.redhat.com/errata/RHSA-2008:0860
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0860.json
cve.org/CVERecord?id=CVE-2008-3274