KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using with the KRBCONFDIR environmental variable, which allows the user to gain additional privileges.
References
| Link | Resource |
|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2000-12/0105.html | Patch |
| http://archives.neohapsis.com/archives/bugtraq/2000-12/0093.html | Exploit Patch Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/5738 |
Information
Published : 2001-02-15 21:00
Updated : 2017-10-09 18:29
NVD link : CVE-2001-0033
Mitre link : CVE-2001-0033
JSON object : View
CWE
Products Affected
kth
- kth_kerberos
netbsd
- netbsd


