CVE-2001-1444: High severity KTH KTH Kerberos vulnerability
The Kerberos Telnet protocol, as implemented by KTH Kerberos IV and Kerberos V (Heimdal), does not encrypt authentication and encryption options sent from the server, which allows remote attackers to downgrade authentication and encryption mechanisms via a man-in-the-middle attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2001-1444?
CVE-2001-1444 is considered a medium severity vulnerability due to its potential exploitation in a man-in-the-middle attack.
How do I fix CVE-2001-1444?
To fix CVE-2001-1444, upgrade to a version of KTH Kerberos that addresses this vulnerability.
What systems are affected by CVE-2001-1444?
CVE-2001-1444 affects KTH Kerberos IV and KTH Kerberos V (Heimdal) versions 4 and 5.
What are the consequences of CVE-2001-1444?
The consequences of CVE-2001-1444 include the possibility of remote attackers downgrading authentication and encryption methods.
Can CVE-2001-1444 be exploited remotely?
Yes, CVE-2001-1444 can be exploited remotely through a man-in-the-middle attack by an attacker intercepting communication.