high7.2Public exploit code
CVE-2001-0034
KTH Kerberos IV allows local users to specify an alternate proxy using the krb4_proxy variable, which allows the user to generate false proxy responses and pos…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- KTH Kerberos 4 - Arbitrary Proxy Usage2000-12-08 · remote · multiple · Verified
Impact
KTH Kerberos IV allows local users to specify an alternate proxy using the krb4_proxy variable, which allows the user to generate false proxy responses and possibly gain privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kth | Kth Kerberos | through 4.1.0.3 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0093.html
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0105.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5733
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0093.html
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0105.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5733