Sign inStart freeBook a demo

Mit vulnerabilitiesNone on the known-exploited list.

Vendor
The short answer

Mit has 157 published vulnerabilities across 10 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Kerberos 5, with 137. If you run Mit software, patch the exploited flaws first.

See the exploited flaws

We keep watching the known-exploited list.

Products

Which Mit products have the most vulnerabilities?

Kerberos 5 leads with 137 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.

  1. Kerberos 5137
  2. Kerberos33
  3. Krb5-Appl4
  4. Scratch-Svg-Renderer2
  5. Cgiemail2
  6. Universal Turing Machine1
  7. Kerberos FTP Client1
  8. Mit Kerberos1
  9. Pgp Public Key Server1
  10. Scratch-VM1
Published vulnerabilities
Known exploited

Which Mit vulnerabilities are being exploited?

This is the list that matters most: flaws criminals are using now.

None of Mit's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.

Exploit likelihood

Which Mit flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. 95%
    CVE-2011-4862Critical

    Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other...

    CVSS10.0Published25 Dec 2011
  2. 40%
    CVE-2009-3295Medium

    The prep_reprocess_req function in kdc/do_tgs_req.c in the cross-realm referral implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.1 allows remote attackers to cause a...

    CVSS5.0Published29 Dec 2009
  3. 40%
    CVE-2016-3119Medium

    The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) through 1.13.4 and 1.14.x through 1.14.1 mishandles the DB argument, which...

    CVSS5.3Published26 Mar 2016
  4. 39%
    CVE-2001-0554Critical

    Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled...

    CVSS10.0Published14 Aug 2001
  5. 30%
    CVE-2007-0956Critical

    The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a '-' character, a similar issue to CVE-2007-0882.

    CVSS10.0Published6 Apr 2007
  6. 21%
    CVE-2011-0285Critical

    The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary...

    CVSS10.0Published15 Apr 2011
  7. 19%
    CVE-2001-0247Critical

    Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2) g_lstat, (3) g_stat, and (4) the glob0...

    CVSS10.0Published18 Jun 2001
  8. 17%
    CVE-2005-0488Medium

    Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command.

    CVSS5.0Published14 Jun 2005
  9. 17%
    CVE-2000-0389Critical

    Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.

    CVSS10.0Published16 May 2000
  10. 15%
    CVE-2002-1235Critical

    The kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (krb5) krb5-1.2.6 and earlier, (2) kadmind in KTH Kerberos 4 (eBones) before 1.2.1, and (3) kadmind...

    CVSS10.0Published4 Nov 2002
Every product

All Mit products we track.

8 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.

This directory lists the 8 Mit products with at least one tracked version, of 10 in our catalogue.

Precursor Intelligence

Running Mit? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Start free →Book a demo

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

Our catalogue lists 157 published vulnerabilities across 10 products and 238 versions from Mit.

None of Mit's vulnerabilities is on the list of flaws known to be exploited today.

Kerberos 5, with 137 published vulnerabilities. Its own page lists the ones known to be exploited.

Create a Precursor Intelligence account and track the Mit products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.

Keep exploring