How severe is CVE-2001-0033?

CVE-2001-0033 has a CVSS 2.0 base score of 7.2, rated high severity.

Is CVE-2001-0033 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (38th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2001-0033?

CVE-2001-0033 primarily affects Kth Kth Kerberos. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2001-0033?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2001-0033 published?

CVE-2001-0033 was published on 2001-02-16 and last updated on 2026-06-16.

CVE-2001-0033

CVE-2001-0033 is a high-severity vulnerability in Kth Kth Kerberos with a CVSS 2.0 base score of 7.2. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: High (CVSS 2.0 base score 7.2)
EPSS exploit prediction: 0% (38th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Kth Kth Kerberos
Published: 2001-02-16
Last modified: 2026-06-16

Description

KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using with the KRBCONFDIR environmental variable, which allows the user to gain additional privileges.

Frequently asked questions

What is CVE-2001-0033?: KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using with the KRBCONFDIR environmental variable, which allows the user to gain additional privileges.
How severe is CVE-2001-0033?: CVE-2001-0033 has a CVSS 2.0 base score of 7.2, rated high severity.
Is CVE-2001-0033 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (38th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2001-0033?: CVE-2001-0033 primarily affects Kth Kth Kerberos. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2001-0033?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2001-0033 published?: CVE-2001-0033 was published on 2001-02-16 and last updated on 2026-06-16.

References

Affected products (2)

cpe:2.3:a:kth:kth_kerberos:4:*:*:*:*:*:*:*
cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*

More vulnerabilities in Kth Kth Kerberos

CVE-2002-0600 — High (CVSS 7.5): Heap overflow in the KTH Kerberos 4 FTP client 4-1.1.1 allows remote malicious servers to execute arbitrary code on the…
CVE-2001-1444 — High (CVSS 7.5): The Kerberos Telnet protocol, as implemented by KTH Kerberos IV and Kerberos V (Heimdal), does not encrypt…
CVE-2001-0035 — High (CVSS 7.2): Buffer overflow in the kdc_reply_cipher function in KTH Kerberos IV allows remote attackers to cause a denial of…
CVE-2001-0034 — High (CVSS 7.2): KTH Kerberos IV allows local users to specify an alternate proxy using the krb4_proxy variable, which allows the user…
CVE-2001-1443 — Medium (CVSS 5.0): KTH Kerberos IV and Kerberos V (Heimdal) for Telnet clients do not encrypt connections if the server does not support…
CVE-1999-1099 — Medium (CVSS 5.0): Kerberos 4 allows remote attackers to obtain sensitive information via a malformed UDP packet that generates an error…

All CVEs affecting Kth Kth Kerberos →