Description
Kerberos 4 (aka krb4) allows local users to overwrite arbitrary files via a symlink attack on new ticket files.
References
- 20010307 Security advisory: Unsafe temporary file handling in krb4 mailing-list
- RHSA-2001:025 vendor-advisory
Unscored
CVE-2001-0417
EUVD-2001-0414GHSA-84hw-m4f3-jqjx
Kerberos 4 (aka krb4) allows local users to overwrite arbitrary files via a symlink attack on new ticket files.
Published May 24, 2001 · Updated Aug 8, 2024 · Assigned by mitre