[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZdCpAuNuNW3JyVop2SDkDzOdOr3F2O8ilNyroadXkJQ":3,"g5a-ex:mit\u002Fkrb5-appl@*":79,"g5a-family:mit\u002Fkrb5-appl":81},{"success":4,"data":5},true,{"product":6,"versions":23,"topVulnerabilitiesByEpss":28,"kevVulnerabilities":56,"seoMetadata":57,"meta":76},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":9,"kevCount":10,"lastCveUpdate":11,"versions":12,"description":22},"mit","krb5-appl",4,0,"2021-02-02",[13,16,18,20],{"version":14,"cve_count":10,"kev_count":10,"has_kev":15},"1.0",false,{"version":17,"cve_count":10,"kev_count":10,"has_kev":15},"1.0.1",{"version":19,"cve_count":10,"kev_count":10,"has_kev":15},"1.0.2",{"version":21,"cve_count":10,"kev_count":10,"has_kev":15},"1.0.3","Krb5-appl by Mit is a technology product with 4 tracked versions and 4 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[24,25,26,27],{"version":14,"cve_count":10,"kev_count":10,"has_kev":15},{"version":17,"cve_count":10,"kev_count":10,"has_kev":15},{"version":19,"cve_count":10,"kev_count":10,"has_kev":15},{"version":21,"cve_count":10,"kev_count":10,"has_kev":15},[29,37,44,51],{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":15,"epssScore":36},"CVE-2011-4862","Buffer overflow in libtelnet\u002Fencrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.","2011-12-25",10,"v2","Critical",0.95061,{"cveId":38,"description":39,"publishedDate":40,"cvssScore":41,"cvssVersion":34,"severity":42,"isKev":15,"epssScore":43},"CVE-2011-1526","ftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.1 and earlier does not check the krb5_setegid return value, which allows remote authenticated users to bypass intended group access restrictions, and create, overwrite, delete, or read files, via standard FTP commands, related to missing autoconf tests in a configure script.","2011-07-11",6.5,"Medium",0.03938,{"cveId":45,"description":46,"publishedDate":11,"cvssScore":47,"cvssVersion":48,"severity":49,"isKev":15,"epssScore":50},"CVE-2019-25018","In the rcp client in MIT krb5-appl through 1.0.3, malicious servers could bypass intended access restrictions via the filename of . or an empty filename, similar to CVE-2018-20685 and CVE-2019-7282. The impact is modifying the permissions of the target directory on the client side. NOTE: MIT krb5-appl is not supported upstream but is shipped by a few Linux distributions. The affected code was removed from the supported MIT Kerberos 5 (aka krb5) product many years ago, at version 1.8.",7.5,"v3.1","High",0.01546,{"cveId":52,"description":53,"publishedDate":11,"cvssScore":54,"cvssVersion":48,"severity":42,"isKev":15,"epssScore":55},"CVE-2019-25017","An issue was discovered in rcp in MIT krb5-appl through 1.0.3. Due to the rcp implementation being derived from 1983 rcp, the server chooses which files\u002Fdirectories are sent to the client. However, the rcp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious rcp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the rcp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh\u002Fauthorized_keys file). This issue is similar to CVE-2019-6111 and CVE-2019-7283. NOTE: MIT krb5-appl is not supported upstream but is shipped by a few Linux distributions. The affected code was removed from the supported MIT Kerberos 5 (aka krb5) product many years ago, at version 1.8.",5.9,0.01368,[],{"title":58,"metaDescription":59,"keywords":60,"structuredData":61},"Krb5-appl by Mit - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Krb5-appl by Mit covering 4 versions with 4 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Krb5-appl vulnerabilities, Krb5-appl security, Krb5-appl CVE, Mit Krb5-appl, Krb5-appl threat intelligence, Mit security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":62,"@type":63,"name":64,"description":59,"url":65,"manufacturer":66,"applicationCategory":70,"softwareVersion":71,"mainEntity":72},"https:\u002F\u002Fschema.org","SoftwareApplication","Krb5-appl","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmit\u002Fkrb5-appl",{"@type":67,"name":68,"url":69},"Organization","Mit","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmit","Security Software","4 versions tracked",{"@type":73,"name":74,"description":75,"vulnerabilityCount":9,"dateModified":11},"SecurityVulnerability","Krb5-appl Security Vulnerabilities","Security vulnerabilities affecting Krb5-appl by Mit",{"totalVersions":9,"totalVulnerabilities":9,"kevVulnerabilities":10,"lastUpdated":11,"generatedAt":77,"apiVersion":78},"2026-10-19T18:09:03.529Z","3.0",{"rows":80,"total":10,"capped":15,"failed":10},[],[]]