CVE-2001-0417 Path traversal in n/a

What is CVE-2001-0417?

CVE-2001-0417 is a low-severity path traversal vulnerability in Mit Kerberos 5, published on 24 May 2001. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Kerberos 4 (aka krb4) allows local users to overwrite arbitrary files via a symlink attack on new ticket files.

Which versions are affected by CVE-2001-0417?

It affects 2 products.

Products include Mit Kerberos, Mit Kerberos 5.

How do I fix CVE-2001-0417?

No fix has been published for CVE-2001-0417 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2001-0417 being exploited?

There is no known exploitation of CVE-2001-0417 in the wild and no public exploit code.

Other vulnerabilities in Mit Kerberos 5

• CVE-2009-4212 Integer overflow in n/a Critical 10.0
• CVE-2004-0523 Memory corruption in n/a Critical 10.0
• CVE-2010-0283 Denial of service in n/a High 7.8
• CVE-2018-5709 Integer overflow in n/a High 7.5
• CVE-2003-0138 Auth bypass in n/a High 7.5

All Mit Kerberos 5 vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-84hw-m4f3-jqjx.