CVE-2012-1012: server/server_stubs.c in the kadmin protocol implementation in MIT Kerberos 5 (aka krb5) 1.10 before 1.10.1...

Security readout for executives and security teams

This flaw affects MIT Kerberos 5 kadmin in version 1.10 before 1.10.1. A remote authenticated administrator with the global list privilege may read or change string attributes that should be more tightly controlled. It is not listed as known exploited in the provided sources. Exposure is likely limited to organizations running MIT Kerberos 5 1.10 kadmin services, especially environments delegating administrative rights with global list privilege. Vendor-packaged builds may have backported fixes, so version and package advisory checks matter. Treat as a targeted Kerberos administration risk, not an internet-scale emergency. Prioritize validation where Kerberos underpins critical authentication and where admin privileges are broadly delegated. Mitigation focus: Upgrade MIT krb5 1.10 deployments to 1.10.1 or later.; Check OS vendor advisories for backported krb5 fixes.; Restrict kadmin access to trusted administrative networks..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.