Unscored CVE-2001-0033 EUVD-2001-0033GHSA-wcg5-3v2j-2jwv

KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alter…

Published May 7, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using with the KRBCONFDIR environmental variable, which allows the user to gain additional privileges.

References

20001208 Vulnerabilities in KTH Kerberos IV mailing-list
kerberos4-user-config(5738) vdb-entry
20001210 KTH upgrade and FIX mailing-list