GCVE - cpe:2.3:a:kth:kth_kerberos:4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:kth:kth_kerberos:4:*:*:*:*:*:*:*

part: a version: 4 update: *

Vendor	Kth (`2525d63c-71cf-5e20-a1e1-d4761e448842`)
Product	Kth Kerberos (`2c196f39-7fe8-5509-be02-086e61150c40`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2001-1444`	vulnerable	2026-06-08 04:46:20.021195	Details available The Kerberos Telnet protocol, as implemented by KTH Kerberos IV and Kerberos V (Heimdal), does not encrypt authentication and encryption options sent from the server, which allows remote attackers to downgrade authentication and encryption mechanisms via a man-in-the-middle attack. Published: 2005-04-21T04:00:00.000Z Updated: 2024-08-08T04:58:11.496Z Open on db.gcve.eu Reference links http://josefsson.org/ktelnet/kerberos-telnet.html https://exchange.xforce.ibmcloud.com/vulnerabilities/10640 http://www.kb.cert.org/vuls/id/774587	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2001-1443`	vulnerable	2026-06-08 04:46:20.020021	Details available KTH Kerberos IV and Kerberos V (Heimdal) for Telnet clients do not encrypt connections if the server does not support the requested encryption, which allows remote attackers to read communications via a man-in-the-middle attack. Published: 2005-04-21T04:00:00.000Z Updated: 2024-08-08T04:58:11.441Z Open on db.gcve.eu Reference links http://josefsson.org/ktelnet/kerberos-telnet.html https://exchange.xforce.ibmcloud.com/vulnerabilities/10640 http://www.kb.cert.org/vuls/id/390280	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2001-0036`	vulnerable	2026-06-08 04:45:19.602894	Details available KTH Kerberos IV allows local users to overwrite arbitrary files via a symlink attack on a ticket file. Published: 2001-05-07T04:00:00.000Z Updated: 2024-08-08T04:06:55.319Z Open on db.gcve.eu Reference links http://www.redhat.com/support/errata/RHSA-2001-025.html http://archives.neohapsis.com/archives/bugtraq/2000-12/0093.html https://exchange.xforce.ibmcloud.com/vulnerabilities/5754 http://archives.neohapsis.com/archives/bugtraq/2000-12/0105.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2001-0035`	vulnerable	2026-06-08 04:45:19.602606	Details available Buffer overflow in the kdc_reply_cipher function in KTH Kerberos IV allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long authentication request. Published: 2001-05-07T04:00:00.000Z Updated: 2024-08-08T04:06:55.377Z Open on db.gcve.eu Reference links http://archives.neohapsis.com/archives/bugtraq/2000-12/0093.html https://exchange.xforce.ibmcloud.com/vulnerabilities/5734 http://archives.neohapsis.com/archives/bugtraq/2001-01/0511.html http://archives.neohapsis.com/archives/bugtraq/2000-12/0105.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2001-0033`	vulnerable	2026-06-08 04:45:19.600364	Details available KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using with the KRBCONFDIR environmental variable, which allows the user to gain additional privileges. Published: 2001-05-07T04:00:00.000Z Updated: 2024-08-08T04:06:55.308Z Open on db.gcve.eu Reference links http://archives.neohapsis.com/archives/bugtraq/2000-12/0093.html https://exchange.xforce.ibmcloud.com/vulnerabilities/5738 http://archives.neohapsis.com/archives/bugtraq/2000-12/0105.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-1999-1099`	vulnerable	2026-06-08 04:44:58.208107	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.