Description
KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using with the KRBCONFDIR environmental variable, which allows the user to gain additional privileges.
References (3)
Core 3
Core References
Exploit, Patch, Vendor Advisory mailing-list
x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2000-12/0093.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/5738
Patch mailing-list
x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2000-12/0105.html
Scores
EPSS
0.0005
EPSS Percentile
15.6%
Details
Status
published
Products (2)
kth/kth_kerberos
4
netbsd/netbsd
1.5
Published
Feb 16, 2001
Tracked Since
Feb 18, 2026