Unscored CVE-2001-0036 EUVD-2001-0036GHSA-wx56-xj4w-qc5p

KTH Kerberos IV allows local users to overwrite arbitrary files via a symlink attack on a ticket file.

Published May 7, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

KTH Kerberos IV allows local users to overwrite arbitrary files via a symlink attack on a ticket file.

References

RHSA-2001:025 vendor-advisory
20001208 Vulnerabilities in KTH Kerberos IV mailing-list
kerberos4-tmpfile-dos(5754) vdb-entry
20001210 KTH upgrade and FIX mailing-list