CVE:CVE-2014-6324
CNNVD:CNNVD-201411-318
Microsoft Windows是美国微软（Microsoft）公司的一套个人设备使用的操作系统。
多款Microsoft Windows产品中的Kerberos KDC中存在安全漏洞。远程攻击者可借助票据中伪造的签名利用该漏洞获取域管理员权限。
solution:Upgrade microsoft windows_7 to a higher version than *; Upgrade microsoft windows_8 to a higher version than *; Upgrade microsoft windows_8.1 to a higher version than *; Upgrade microsoft windows_server_2003 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2008 to a higher version than *:sp2,r2:sp1,and avoid the version *:sp2,r2:sp1; Upgrade microsoft windows_server_2012 to a higher version than -,r2,and avoid the version r2; Upgrade microsoft windows_vista to a higher version than -:sp2,and avoid the version -:sp2