CVE-2001-0033: High severity KTH KTH Kerberos vulnerability
Published Feb 16, 2001
·Updated
KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using with the KRBCONFDIR environmental variable, which allows the user to gain additional privileges.
Affected Software
2 affected components
KTH KTH Kerberos=4
NetBSD NetBSD=1.5
Remediation
Event History
Feb 16, 2001
CVE Published
05:00 AM
May 7, 2001
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-0033?
CVE-2001-0033 is rated as a medium severity vulnerability.
2
How do I fix CVE-2001-0033?
To fix CVE-2001-0033, restrict access to the Kerberos configuration directory and properly secure environment variables.
3
Who is affected by CVE-2001-0033?
CVE-2001-0033 affects KTH Kerberos version 4 and NetBSD version 1.5.
4
What impact does CVE-2001-0033 have?
If exploited, CVE-2001-0033 allows local users to change Kerberos server configurations, potentially granting them elevated privileges.
5
Is CVE-2001-0033 exploitable remotely?
CVE-2001-0033 is not remotely exploitable; it requires local access to the vulnerable system.