KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using with the KRBCONFDIR environmental variable, which allows the user to gain additional privileges.
References
Link | Resource |
---|---|
http://archives.neohapsis.com/archives/bugtraq/2000-12/0105.html | Patch |
http://archives.neohapsis.com/archives/bugtraq/2000-12/0093.html | Exploit Patch Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/5738 |
Information
Published : 2001-02-15 21:00
Updated : 2017-10-09 18:29
NVD link : CVE-2001-0033
Mitre link : CVE-2001-0033
JSON object : View
CWE
Products Affected
kth
- kth_kerberos
netbsd
- netbsd