CVE-2001-0417: Mit Kerberos

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Kerberos 4 (aka krb4) allows local users to overwrite arbitrary files via a symlink attack on new ticket files.

Affected products

• Mit Kerberos: version 4 only
• Mit Kerberos 5: version 1.5.2 only

Published 2001-06-27. Last modified 2026-06-16.