EUVD-2001-0034

Malware in sbrugna...

EUVD-2001-0033

Malware in sbrugna...

EUVD-2001-0035

Malware in sbrugna...

EUVD-2001-0036

Malware in sbrugna...

CVE-2001-1444: Undefined Security Weakness

The Kerberos Telnet protocol, as implemented by KTH Kerberos IV and Kerberos V Heimdal, does not encrypt authentication and encryption options sent from the server, which allows remote attackers to downgrade authentication and encryption mechanisms via a man-in-the-middle attack...

CVE-2001-1443: Undefined Security Weakness

KTH Kerberos IV and Kerberos V Heimdal for Telnet clients do not encrypt connections if the server does not support the requested encryption, which allows remote attackers to read communications via a man-in-the-middle attack...

CVE-2001-0033

CVE-2001-0033 affects KTH Kerberos IV. Local users can alter a Kerberos server’s configuration by supplying an alternate directory via the KRBCONFDIR environmental variable, enabling escalation of privileges. The description identifies the root cause as the ability to specify a custom configurati...

CVE-2001-0035

CVE-2001-0035 concerns a buffer overflow in the kdc_reply_cipher function of KTH Kerberos IV. The vulnerability arises from processing a long authentication request, which can cause a denial of service and potentially allow arbitrary code execution. Documents confirm the affected component is KTH...

CVE-2001-0036

KTH Kerberos IV allows local users to overwrite arbitrary files via a symlink attack on a ticket file...

CVE-2001-0034

KTH Kerberos IV is affected by a local privilege issue where the krb4_proxy variable can be used to specify an alternate proxy, enabling a user to generate false proxy responses and potentially gain privileges. The vulnerability is local in scope, with impact described as complete confidentiality...

CVE-2001-0034

KTH Kerberos IV allows local users to specify an alternate proxy using the krb4proxy variable, which allows the user to generate false proxy responses and possibly gain privileges...

CVE-2001-0035

Buffer overflow in the kdcreplycipher function in KTH Kerberos IV allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long authentication request...

CVE-2001-0033: Undefined Security Weakness

KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using with the KRBCONFDIR environmental variable, which allows the user to gain additional privileges...

CVE-2001-0036: Undefined Security Weakness

KTH Kerberos IV allows local users to overwrite arbitrary files via a symlink attack on a ticket file...

CVE-2001-0034: Undefined Security Weakness

KTH Kerberos IV allows local users to specify an alternate proxy using the krb4proxy variable, which allows the user to generate false proxy responses and possibly gain privileges...

CVE-2001-0035: Undefined Security Weakness

Buffer overflow in the kdcreplycipher function in KTH Kerberos IV allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long authentication request...

CVE-2001-0033

KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using with the KRBCONFDIR environmental variable, which allows the user to gain additional privileges...

CVE-2001-0034

KTH Kerberos IV allows local users to specify an alternate proxy using the krb4proxy variable, which allows the user to generate false proxy responses and possibly gain privileges...

CVE-2001-0035

Buffer overflow in the kdcreplycipher function in KTH Kerberos IV allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long authentication request...

CVE-2001-0036

KTH Kerberos IV allows local users to overwrite arbitrary files via a symlink attack on a ticket file...