CVE-2001-0033 Information

Description

KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using with the KRBCONFDIR environmental variable which allows the user to gain additional privileges.

Reference

http://archives.neohapsis.com/archives/bugtraq/2000-12/0093.html http://archives.neohapsis.com/archives/bugtraq/2000-12/0105.html https://exchange.xforce.ibmcloud.com/vulnerabilities/5738

Share on: