CVE-2011-0043: Kerberos in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 supports weak hashing algorithms, which al...

Security readout for executives and security teams

This is a Windows Kerberos privilege-escalation flaw in Windows XP SP2/SP3 and Windows Server 2003 SP2. A local user could gain higher privileges by using a service that sends specially formed Kerberos service tickets. It matters mainly where these legacy systems still exist. Exposure is limited to environments still running Windows XP SP2/SP3 or Windows Server 2003 SP2 with Kerberos in use. The bundle does not identify newer Windows versions as affected. Prioritize remediation if any affected legacy Windows systems remain in production or sensitive network segments. The risk is privilege escalation after local access, not confirmed internet-scale exploitation. Mitigation focus: Apply Microsoft guidance from MS11-013 where applicable.; Identify and remove remaining Windows XP or Server 2003 systems.; Restrict local user access on affected hosts until remediated..

Prepared

Jun 27, 2026, 18:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.