VDB

GCVE-110-CERTCC-2001-390280

GCVE-110-CERTCC-2001-390280
Advisory Published
Vulnetix · Advisory published September 12, 2001
A vulnerability exists in the KTH Kerberos IV and Kerberos V (Heimdal) Telnet implementations. When a KTH Kerberos Telnet client requests data encryption and the server does not appear to support it, the client will establish the connection using no encryption. A properly located attacker can then capture and read the contents of the Telnet session.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact11population10exploitation0widely_known16score_current5.218125ease_of_exploitation11

References

KTH Kerberos Telnet implementations do not strictly enforce client encryption request
advisory
KTH Kerberos Telnet implementations do not strictly enforce client encryption request
url
KTH Kerberos Telnet implementations do not strictly enforce client encryption request
url
KTH Kerberos Telnet implementations do not strictly enforce client encryption request
url

Browse GCVE Records

72,664 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›