Unscored severity · published Jun 18, 2002
CVE-2002-0600
Heap overflow in the KTH Kerberos 4 FTP client 4-1.1.1 allows remote malicious servers to execute arbitrary code on the client via a long response to a passive (PASV) mode request
–
CVSS
2.4%
EPSS
No
On KEV
Description
Heap overflow in the KTH Kerberos 4 FTP client 4-1.1.1 allows remote malicious servers to execute arbitrary code on the client via a long response to a passive (PASV) mode request.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KK
Kth Kerberos · Kth
4_1.0.2; 4_1.0.3; 4_1.0.4; 4_1.1.1 · source: NVD
LU
Lukemftp · Luke Mewburn
1.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0600
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0600
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-04/0339.html
Vendor Advisory
http://www.iss.net/security_center/static/8938.php
www.securityfocus.com
http://www.securityfocus.com/bid/4592
More from Kth Kerberos
–
CVE-2001-1443
KTH Kerberos IV and Kerberos V (Heimdal) for Telnet clients do not encrypt connections if the server does not support the requested encryption, which allows remote attackers to…
–
CVE-2001-1444
The Kerberos Telnet protocol, as implemented by KTH Kerberos IV and Kerberos V (Heimdal), does not encrypt authentication and encryption options sent from the server, which allows…
–
CVE-2001-0035
Buffer overflow in the kdc_reply_cipher function in KTH Kerberos IV allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long…
–
CVE-2001-0036
KTH Kerberos IV allows local users to overwrite arbitrary files via a symlink attack on a ticket file
–
CVE-2001-0033
KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using with the KRBCONFDIR…