CVE-2016-0049

MEDIUM

Microsoft Windows 10 - Credentials Management

Title source: rule

Description

Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511 does not properly validate password changes, which allows remote attackers to bypass authentication by deploying a crafted Key Distribution Center (KDC) and then performing a sign-in action, aka "Windows Kerberos Security Feature Bypass."

Exploits (2)

nomisec WORKING POC 51 stars

by JackOfMostTrades · poc

https://github.com/JackOfMostTrades/bluebox

View Code ZIP pw:eip

exploitdb WRITEUP VERIFIED

by Nabeel Ahmed · textlocalwindows

https://www.exploit-db.com/exploits/39442

View Code ZIP pw:eip

References (5)

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/82535

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1034985

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/39442/

[Vendor Advisory] https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-014

[Exploit, Third Party Advisory] http://packetstormsecurity.com/files/135797/Windows-Kerberos-Security-Feature-Bypass.html

Scores

CVSS v3 6.2

EPSS 0.0353

EPSS Percentile 87.5%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Classification

CWE

CWE-255

Status draft

Affected Products (9)

microsoft/windows_10

microsoft/windows_10

microsoft/windows_7

microsoft/windows_8.1

microsoft/windows_server_2008

microsoft/windows_server_2008

microsoft/windows_server_2012

microsoft/windows_server_2012

microsoft/windows_vista

Timeline

Published Feb 10, 2016

Tracked Since Feb 18, 2026