CVE-2001-0417: Low severity MIT Kerberos vulnerability
Published May 24, 2001
·Updated
Kerberos 4 (aka krb4) allows local users to overwrite arbitrary files via a symlink attack on new ticket files.
Affected Software
2 affected components
MIT Kerberos=4
MIT Kerberos 5=1.5.2
Remediation
Event History
May 24, 2001
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-0417?
CVE-2001-0417 is classified as a moderate severity vulnerability due to the potential for local users to exploit symlink attacks.
2
How do I fix CVE-2001-0417?
To mitigate CVE-2001-0417, ensure that users cannot create symlinks in directories where new ticket files are created.
3
Which software versions are affected by CVE-2001-0417?
CVE-2001-0417 affects MIT Kerberos 4 and version 1.5.2 of MIT Kerberos 5.
4
What causes the vulnerability in CVE-2001-0417?
The vulnerability in CVE-2001-0417 is caused by improper handling of symlink permissions during the creation of new ticket files.
5
Can CVE-2001-0417 lead to escalation of privileges?
Yes, CVE-2001-0417 can potentially lead to privilege escalation if a local user successfully overwrites sensitive files.