CVE-2001-1443: Medium severity KTH KTH Kerberos vulnerability
Published Aug 27, 2001
·Updated
KTH Kerberos IV and Kerberos V (Heimdal) for Telnet clients do not encrypt connections if the server does not support the requested encryption, which allows remote attackers to read communications via a man-in-the-middle attack.
Affected Software
2 affected components
KTH KTH Kerberos=4
KTH KTH Kerberos=5
Event History
Aug 27, 2001
CVE Published
04:00 AM
Apr 21, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-1443?
CVE-2001-1443 is considered a medium severity vulnerability due to the potential for man-in-the-middle attacks.
2
How do I fix CVE-2001-1443?
To fix CVE-2001-1443, ensure that both the client and server support and enforce encrypted communications during Telnet sessions.
3
Who is affected by CVE-2001-1443?
CVE-2001-1443 affects users of KTH Kerberos IV and Kerberos V (Heimdal) Telnet clients.
4
What type of attack does CVE-2001-1443 allow?
CVE-2001-1443 allows remote attackers to conduct man-in-the-middle attacks by intercepting unencrypted communications.
5
When was CVE-2001-1443 reported?
CVE-2001-1443 was reported in the year 2001.