{"id":"CVE-2014-6324","aliases":["EUVD-2014-6208","GHSA-j28h-3q4c-49h2"],"status":"published","title":"The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista...","description":"The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote authenticated domain users to obtain domain administrator privileges via a forged signature in a ticket, as exploited in the wild in November 2014, aka \"Kerberos Checksum Vulnerability.\"","severity":{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.87335,"percentile":0.99756,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-264"],"published":"2014-11-18T23:00:00Z","modified":"2026-06-17T00:12:54Z","kev":{"date_added":"2022-03-25","due_date":"2022-04-15","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2022-03-25"},{"source":"kev","since":"2022-03-25"}],"exploits":[{"source":"exploitdb","id":"EDB-35474","title":"Microsoft Windows Kerberos - Privilege Escalation (MS14-068)","type":"remote","platform":"windows","date":"2014-12-05","verified":true,"url":"https://www.exploit-db.com/exploits/35474"},{"source":"metasploit","id":"auxiliary/admin/kerberos/ms14_068_kerberos_checksum","title":"MS14-068 Microsoft Kerberos Checksum Validation Vulnerability","type":"auxiliary","date":"2014-11-18","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/admin/kerberos/ms14_068_kerberos_checksum"}],"products":[{"vendor":"microsoft","product":"kerberos key distribution center (kdc)"},{"vendor":"microsoft","product":"windows_7"},{"vendor":"microsoft","product":"windows_8"},{"vendor":"microsoft","product":"windows_8.1"},{"vendor":"microsoft","product":"windows_server_2003"},{"vendor":"microsoft","product":"windows_server_2008"},{"vendor":"microsoft","product":"windows_server_2012"}],"references":[{"url":"http://www.securitytracker.com/id/1031237","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq\u0026m=142350249315918\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://blogs.technet.com/b/srd/archive/2014/11/18/additional-information-about-cve-2014-6324.aspx","tags":["x_refsource_CONFIRM","x_transferred","Not Applicable","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/70958","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-068","tags":["vendor-advisory","x_refsource_MS","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/ncas/alerts/TA14-323A","tags":["third-party-advisory","x_refsource_CERT","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"http://secunia.com/advisories/62556","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-6324","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6324"},{"url":"https://github.com/advisories/GHSA-j28h-3q4c-49h2"}],"sources":{"cve":[{"id":"CVE-2014-6324","description":"The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote authenticated domain users to obtain domain administrator privileges via a forged signature in a ticket, as exploited in the wild in November 2014, aka \"Kerberos Checksum Vulnerability.\"","status":"published","published":"2014-11-18T23:00:00Z","modified":"2025-10-22T00:05:34.565Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"updated_at":"2026-11-02T14:33:45.263043Z"}],"euvd":[{"id":"EUVD-2014-6208","description":"The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote authenticated domain users to obtain domain administrator privileges via a forged signature in a ticket, as exploited in the wild in November 2014, aka \"Kerberos Checksum Vulnerability.\"","status":"published","published":"2014-11-18T23:00:00Z","modified":"2025-10-22T00:05:34Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"exploited_since":"2022-03-25","updated_at":"2026-11-02T19:49:39.244432Z"}],"ghsa":[{"id":"GHSA-j28h-3q4c-49h2","title":"The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista...","description":"The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote authenticated domain users to obtain domain administrator privileges via a forged signature in a ticket, as exploited in the wild in November 2014, aka \"Kerberos Checksum Vulnerability.\"","status":"published","published":"2022-05-14T01:31:24Z","modified":"2025-10-22T03:31:12Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:04:09.843024Z"}],"kev":[{"id":"CVE-2014-6324","title":"Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability","description":"The Kerberos Key Distribution Center (KDC) in Microsoft allows remote authenticated domain users to obtain domain administrator privileges.","cwes":["CWE-264"],"kev":{"date_added":"2022-03-25","due_date":"2022-04-15","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.541131Z"}],"nvd":[{"id":"CVE-2014-6324","description":"The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote authenticated domain users to obtain domain administrator privileges via a forged signature in a ticket, as exploited in the wild in November 2014, aka \"Kerberos Checksum Vulnerability.\"","status":"published","published":"2014-11-18T23:59:02.503Z","modified":"2026-06-17T00:12:54.61Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:02:57.304171Z"}]}}