CVE-2001-1443 KTH Kerberos IV and Kerberos V (Heimdal) for Telnet clients do not encrypt connections if the server does not support the requested encryption, which allows remote attackers to read communications via...
MediumCVSS 5.0
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
KTH Kerberos IV and Kerberos V (Heimdal) for Telnet clients do not encrypt connections if the server does not support the requested encryption, which allows remote attackers to read communications via a man-in-the-middle attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kth kerberos | = 4 | No fix listed |
| kth kerberos | = 5 | No fix listed |
References
- josefsson.org exploit
- VU#390280 third-party-advisory us-government-resource
- kth-kerberos-unencrypted-connection(10640) vdb-entry