Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
kth vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2002-0600
Heap overflow in the KTH Kerberos 4 FTP client 4-1.1.1 allows remote malicious servers to execute arbitrary code on the client via a long response to a passive (PASV) mode request.
Kth Kth Kerberos 4 1.0.2
Kth Kth Kerberos 4 1.0.3
Kth Kth Kerberos 4 1.0.4
Kth Kth Kerberos 4 1.1.1
Luke Mewburn Lukemftp 1.5
5
CVSSv2
CVE-2004-0371
Heimdal 0.6.x prior to 0.6.1 and 0.5.x prior to 0.5.3 does not properly perform certain consistency checks for cross-realm requests, which allows remote attackers with control of a realm to impersonate others in the cross-realm trust path.
Kth Heimdal 0.4b
Kth Heimdal 0.4c
Kth Heimdal 0.5.1
Kth Heimdal 0.5.2
Kth Heimdal 0.4d
Kth Heimdal 0.4e
Kth Heimdal 0.5
Kth Heimdal 0.4a
Kth Heimdal 0.6.0
2.1
CVSSv2
CVE-2006-0582
Unspecified vulnerability in rshd in Heimdal 0.6.x prior to 0.6.6 and 0.7.x prior to 0.7.2, when storing forwarded credentials, allows malicious users to overwrite arbitrary files and change file ownership via unknown vectors.
Kth Heimdal 0.6.2
Kth Heimdal 0.6.3
Kth Heimdal 0.6.1
Kth Heimdal 0.7.1.2
Kth Heimdal 0.7.1.3
Kth Heimdal 0.6.4
Kth Heimdal 0.6.5
Kth Heimdal 0.7.1
Kth Heimdal 0.7.1.1
7.8
CVSSv2
CVE-2006-0677
telnetd in Heimdal 0.6.x prior to 0.6.6 and 0.7.x prior to 0.7.2 allows remote unauthenticated malicious users to cause a denial of service (server crash) via unknown vectors that trigger a null dereference.
Kth Heimdal 0.7.1
Kth Heimdal 0.7.1.1
Kth Heimdal 0.6.1
Kth Heimdal 0.7.1.2
Kth Heimdal 0.7.1.3
Kth Heimdal 0.6.4
Kth Heimdal 0.6.5
Kth Heimdal 0.6.2
Kth Heimdal 0.6.3
5
CVSSv2
CVE-2001-1443
KTH Kerberos IV and Kerberos V (Heimdal) for Telnet clients do not encrypt connections if the server does not support the requested encryption, which allows remote malicious users to read communications via a man-in-the-middle attack.
Kth Kth Kerberos 4
Kth Kth Kerberos 5
7.5
CVSSv2
CVE-2001-1444
The Kerberos Telnet protocol, as implemented by KTH Kerberos IV and Kerberos V (Heimdal), does not encrypt authentication and encryption options sent from the server, which allows remote malicious users to downgrade authentication and encryption mechanisms via a man-in-the-middle...
Kth Kth Kerberos 4
Kth Kth Kerberos 5
10
CVSSv2
CVE-2002-1225
Multiple buffer overflows in Heimdal prior to 0.5, possibly in both the (1) kadmind and (2) kdc servers, may allow remote malicious users to gain root access.
Kth Heimdal 0.4a
Kth Heimdal 0.4b
Kth Heimdal 0.3e
Kth Heimdal 0.4c
Kth Heimdal 0.4d
Kth Heimdal 0.4e
10
CVSSv2
CVE-2002-1226
Unknown vulnerabilities in Heimdal prior to 0.5 with unknown impact, possibly in the (1) kadmind and (2) kdc servers, may allow remote or local malicious users to gain root or other access, but not via buffer overflows (CVE-2002-1225).
Kth Heimdal 0.4b
Kth Heimdal 0.4c
Kth Heimdal 0.3e
Kth Heimdal 0.4a
Kth Heimdal 0.4d
Kth Heimdal 0.4e
10
CVSSv2
CVE-2002-1235
The kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (krb5) krb5-1.2.6 and previous versions, (2) kadmind in KTH Kerberos 4 (eBones) prior to 1.2.1, and (3) kadmind in KTH Kerberos 5 (Heimdal) prior to 0.5.1 when comp...
Kth Kth Kerberos 4
Kth Kth Kerberos 5
Mit Kerberos 5
Debian Debian Linux 3.0
7.2
CVSSv2
CVE-2001-0034
KTH Kerberos IV allows local users to specify an alternate proxy using the krb4_proxy variable, which allows the user to generate false proxy responses and possibly gain privileges.
Kth Kth Kerberos
1 EDB exploit
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injection
firmware
CVE-2006-4304
CVE-2024-32878
CVE-2024-31502
XSS
CVE-2024-3059
CVE-2024-33692
CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »