Microsoft Releases Out-of-Band Security Bulletin for Windows Kerberos Vulnerability

Microsoft has released security updates to address a remote elevation of privilege vulnerability which exists in implementations of Kerberos KDC in Microsoft Windows. Exploitation of this vulnerability could allow a remote attacker to take control of an affected system.




US-CERT encourages users and administrators to review Microsoft Security Bulletin MS14-068(link is external) , Vulnerability NoteVU#213119, and Alert TA14-323A for additional details, and apply the necessary updates.