Lucene search
HistoryMay 07, 2001 - 4:00 a.m.
CVE-2001-0033
kth kerberos iv
local exploit
elevated privilege
krbconfdir
nvd
cve-2001-0033
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using with the KRBCONFDIR environmental variable, which allows the user to gain additional privileges.
Affected configurations
Node
kthkth_kerberosMatch4
Node
netbsdnetbsdMatch1.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| kth:kth_kerberos | kth kth kerberos | eq | 4 |
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2001-0033