NetSight
IP …
high7.2

CVE-2001-0033

KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using…

Impact

KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using with the KRBCONFDIR environmental variable, which allows the user to gain additional privileges.

Affected products

VendorProductAffected versions
KthKth Kerberos
Version 4
NetbsdNetbsd
Version 1.5

References