KK
Product
Kth Kerberos
8
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Kth Kerberos to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2002-0600 | – | Jun 18 | Heap overflow in the KTH Kerberos 4 FTP client 4-1.1.1 allows remote malicious servers to execute arbitrary code on the client via a long response to a passive (PASV) mode request Affected: 4_1.0.2; 4_1.0.3; 4_1.0.4; 4_1.1.1 |
| CVE-2001-1443 | – | Aug 27 | KTH Kerberos IV and Kerberos V (Heimdal) for Telnet clients do not encrypt connections if the server does not support the requested encryption, which allows remote attackers to… Affected: 4; 5 |
| CVE-2001-1444 | – | Aug 27 | The Kerberos Telnet protocol, as implemented by KTH Kerberos IV and Kerberos V (Heimdal), does not encrypt authentication and encryption options sent from the server, which allows… Affected: 4; 5 |
| CVE-2001-0035 | – | Feb 16 | Buffer overflow in the kdc_reply_cipher function in KTH Kerberos IV allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long… Affected: 4 |
| CVE-2001-0036 | – | Feb 16 | KTH Kerberos IV allows local users to overwrite arbitrary files via a symlink attack on a ticket file Affected: 4 |
| CVE-2001-0033 | – | Feb 16 | KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using with the KRBCONFDIR… Affected: 4 |
| CVE-2001-0034 | – | Feb 16 | KTH Kerberos IV allows local users to specify an alternate proxy using the krb4_proxy variable, which allows the user to generate false proxy responses and possibly gain… Affected: through 4.1.0.3 |
| CVE-1999-1099 | – | Nov 22 | Kerberos 4 allows remote attackers to obtain sensitive information via a malformed UDP packet that generates an error string that inadvertently includes the realm name and the… Affected: 4 |
Showing 8