CVE-2001-0034: Kth Kerberos

High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days.

KTH Kerberos IV allows local users to specify an alternate proxy using the krb4_proxy variable, which allows the user to generate false proxy responses and possibly gain privileges.

Affected products

  • Kth Kth Kerberos: up to and including 4.1.0.3

Published 2001-02-16. Last modified 2026-06-16.