Approved changes feed: RSS · Atom

cpe:2.3:a:kth:kth_kerberos:5:*:*:*:*:*:*:*

part: a version: 5 update: *

VendorKth (2525d63c-71cf-5e20-a1e1-d4761e448842)
ProductKth Kerberos (2c196f39-7fe8-5509-be02-086e61150c40)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2001-1444 vulnerable 2026-06-08 04:46:20.021221 Details available
The Kerberos Telnet protocol, as implemented by KTH Kerberos IV and Kerberos V (Heimdal), does not encrypt authentication and encryption options sent from the server, which allows remote attackers to downgrade authentication and encryption mechanisms via a man-in-the-middle attack.
Published: 2005-04-21T04:00:00.000Z
Updated: 2024-08-08T04:58:11.496Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1443 vulnerable 2026-06-08 04:46:20.020784 Details available
KTH Kerberos IV and Kerberos V (Heimdal) for Telnet clients do not encrypt connections if the server does not support the requested encryption, which allows remote attackers to read communications via a man-in-the-middle attack.
Published: 2005-04-21T04:00:00.000Z
Updated: 2024-08-08T04:58:11.441Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.