CVE-1999-1099

Kerberos 4 is affected by CVE-1999-1099 via a vulnerability where processing a malformed UDP packet triggers an error string that inadvertently reveals the realm name and the last user. The exposure is remote (network) with low attack complexity and no authentication required, and the impact is p...

CVE-2001-0036

Technical details about CVE-2001-0036 are not publicly available in the supplied documents. Monitor for updates; the description notes a symlink-based local overwrite vulnerability but no explicit affected products, versions, or fixes are documented here.

CVE-2001-1443

CVE-2001-1443 affects KTH Kerberos IV and Kerberos V (Heimdal) used by Telnet clients. The root cause is that the Telnet connection is not encrypted when the server does not support the requested encryption, enabling a man-in-the-middle to read communications. The NVD entry lists a CVSS v2 base s...

CVE-2001-0034

KTH Kerberos IV is affected by a local privilege issue where the krb4_proxy variable can be used to specify an alternate proxy, enabling a user to generate false proxy responses and potentially gain privileges. The vulnerability is local in scope, with impact described as complete confidentiality...

CVE-2002-0600

The CVE-2002-0600 entry concerns a heap overflow in the KTH Kerberos 4 FTP client 4-1.1.1. An attacker-controlled long response to a PASV (passive) FTP command can cause a heap overflow, enabling remote code execution on the client. Impact per NVD is high (CVSSv2: base score 7.5) with network att...

CVE-2001-1444

The CVE-2001-1444 issue concerns the Kerberos Telnet protocol as implemented by KTH Kerberos IV and Kerberos V (Heimdal). The vulnerability arises because the server-sent authentication and encryption options are not encrypted, enabling a man-in-the-middle to downgrade authentication and encrypti...

CVE-2001-0033

CVE-2001-0033 affects KTH Kerberos IV. Local users can alter a Kerberos server’s configuration by supplying an alternate directory via the KRBCONFDIR environmental variable, enabling escalation of privileges. The description identifies the root cause as the ability to specify a custom configurati...

CVE-2001-0035

CVE-2001-0035 concerns a buffer overflow in the kdc_reply_cipher function of KTH Kerberos IV. The vulnerability arises from processing a long authentication request, which can cause a denial of service and potentially allow arbitrary code execution. Documents confirm the affected component is KTH...