CVE-2001-0417 Kerberos 4 (aka krb4) allows local users to overwrite arbitrary files via a symlink attack on new ticket files.
LowCVSS 2.1
EPSS 0.41%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Kerberos 4 (aka krb4) allows local users to overwrite arbitrary files via a symlink attack on new ticket files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mit kerberos | = 4 | No fix listed |
| mit kerberos 5 | = 1.5.2 | No fix listed |
References
- 20010307 Security advisory: Unsafe temporary file handling in krb4 exploit mailing-list patch vendor-advisory
- RHSA-2001:025 vendor-advisory