{"id":"CVE-2008-3274","aliases":["EUVD-2008-3262","GHSA-8w34-c24h-wvp3","RHSA-2008:0860"],"status":"published","title":"The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap://...","description":"The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap:///anyone on the read ACL for the krbMKey attribute, which allows remote attackers to obtain the Kerberos master key via an anonymous LDAP query.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01843,"percentile":0.79169,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2008-09-12T16:00:00Z","modified":"2026-06-16T22:55:30Z","fixes":[{"ecosystem":"Red Hat:enterprise_ipa:1.0","package":"ipa","fixed_in":["0:1.0.0-23.el5ipa"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_ipa:1.0","package":"ipa-admintools","fixed_in":["0:1.0.0-23.el5ipa"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_ipa:1.0","package":"ipa-client","fixed_in":["0:1.0.0-23.el5ipa"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_ipa:1.0","package":"ipa-debuginfo","fixed_in":["0:1.0.0-23.el5ipa"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_ipa:1.0","package":"ipa-python","fixed_in":["0:1.0.0-23.el5ipa"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_ipa:1.0","package":"ipa-server","fixed_in":["0:1.0.0-23.el5ipa"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_ipa:1.0","package":"ipa-server-selinux","fixed_in":["0:1.0.0-23.el5ipa"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_ipa:1.0","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-23.el5ipa"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_ipa:1.0","package":"ipa-admintools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-23.el5ipa"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_ipa:1.0","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-23.el5ipa"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_ipa:1.0","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-23.el5ipa"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_ipa:1.0","package":"ipa-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-23.el5ipa"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_ipa:1.0","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-23.el5ipa"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_ipa:1.0","package":"ipa-server-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-23.el5ipa"}]}]}],"products":[{"vendor":"redhat","product":"enterprise_ipa"},{"vendor":"redhat","product":"freeipa"}],"references":[{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00733.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00743.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://www.securityfocus.com/bid/31111","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.freeipa.org/page/News","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://git.fedorahosted.org/git/freeipa.git/?p=freeipa.git%3Ba=commit%3Bh=9932887f2af38b9701efec27707648c026ec445c","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=457835","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://www.freeipa.org/page/CVE-2008-3274","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://www.securitytracker.com/id?1020850","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://secunia.com/advisories/31861","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2008-0860.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.freeipa.org/page/Downloads","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-3274","tags":["advisory"]},{"url":"http://git.fedorahosted.org/git/freeipa.git/?p=freeipa.git;a=commit;h=9932887f2af38b9701efec27707648c026ec445c"},{"url":"https://github.com/advisories/GHSA-8w34-c24h-wvp3"},{"url":"https://access.redhat.com/errata/RHSA-2008:0860","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0860.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-3274","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-3274","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2008-3274","description":"The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap:///anyone on the read ACL for the krbMKey attribute, which allows remote attackers to obtain the Kerberos master key via an anonymous LDAP query.","status":"published","published":"2008-09-12T16:00:00Z","modified":"2024-08-07T09:28:41.869Z","updated_at":"2026-11-02T14:34:45.877751Z"}],"euvd":[{"id":"EUVD-2008-3262","description":"The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap:///anyone on the read ACL for the krbMKey attribute, which allows remote attackers to obtain the Kerberos master key via an anonymous LDAP query.","status":"published","published":"2008-09-12T16:00:00Z","modified":"2024-08-07T09:28:41Z","updated_at":"2026-11-03T01:38:53.185771Z"}],"ghsa":[{"id":"GHSA-8w34-c24h-wvp3","title":"The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap://...","description":"The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap:///anyone on the read ACL for the krbMKey attribute, which allows remote attackers to obtain the Kerberos master key via an anonymous LDAP query.","status":"published","published":"2022-05-01T23:58:23Z","modified":"2023-02-13T03:30:47Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:54:05.992759Z"}],"nvd":[{"id":"CVE-2008-3274","description":"The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap:///anyone on the read ACL for the krbMKey attribute, which allows remote attackers to obtain the Kerberos master key via an anonymous LDAP query.","status":"published","published":"2008-09-12T16:56:20.477Z","modified":"2026-06-16T22:55:30.977Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:01:28.625777Z"}],"osv":[{"id":"RHSA-2008:0860","title":"Red Hat Security Advisory: ipa security update","status":"published","published":"2024-09-15T17:29:48Z","modified":"2025-11-22T10:18:08Z","updated_at":"2026-11-02T15:53:00.468834Z"}]}}