[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f3jFkRi2Q7a0hJcQMlUF-9UlDzQgPkk7YF1K4YEGCsrs":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":64,"kevVulnerabilities":122,"topProductsByCves":123,"seoMetadata":134,"meta":143},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":63},20030,"mit",10,157,0,238,"2024-06-28","m",[16,21,27,32,37,42,46,50,55,59],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},110840,"kerberos_5",123,137,{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},110839,"kerberos",102,33,"2018-12-26",{"id":28,"product_name":29,"version_count":30,"cve_count":30,"kev_count":11,"last_cve_update":31},110842,"krb5-appl",4,"2021-02-02",{"id":33,"product_name":34,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":36},110845,"scratch-svg-renderer",2,"2022-01-06",{"id":38,"product_name":39,"version_count":40,"cve_count":35,"kev_count":11,"last_cve_update":41},110838,"cgiemail",1,"2004-03-03",{"id":43,"product_name":44,"version_count":11,"cve_count":40,"kev_count":11,"last_cve_update":45},110847,"universal_turing_machine","2021-05-10",{"id":47,"product_name":48,"version_count":11,"cve_count":40,"kev_count":11,"last_cve_update":49},110841,"kerberos_ftp_client","2003-02-19",{"id":51,"product_name":52,"version_count":53,"cve_count":40,"kev_count":11,"last_cve_update":54},110843,"mit_kerberos",3,"2011-12-08",{"id":56,"product_name":57,"version_count":35,"cve_count":40,"kev_count":11,"last_cve_update":58},110844,"pgp_public_key_server","2002-10-04",{"id":60,"product_name":61,"version_count":40,"cve_count":40,"kev_count":11,"last_cve_update":62},110846,"scratch-vm","2020-07-16","Mit is a technology vendor with 10 tracked products and 157 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[65,73,80,87,92,97,102,107,112,117],{"cveId":66,"description":67,"publishedDate":68,"cvssScore":9,"cvssVersion":69,"severity":70,"isKev":71,"epssScore":72},"CVE-2011-4862","Buffer overflow in libtelnet\u002Fencrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.","2011-12-25","v2","Critical",false,0.95061,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":77,"cvssVersion":69,"severity":78,"isKev":71,"epssScore":79},"CVE-2009-3295","The prep_reprocess_req function in kdc\u002Fdo_tgs_req.c in the cross-realm referral implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a ticket request.","2009-12-29",5,"Medium",0.40345,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":84,"cvssVersion":85,"severity":78,"isKev":71,"epssScore":86},"CVE-2016-3119","The process_db_args function in plugins\u002Fkdb\u002Fldap\u002Flibkdb_ldap\u002Fldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) through 1.13.4 and 1.14.x through 1.14.1 mishandles the DB argument, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request to modify a principal.","2016-03-26",5.3,"v3.0",0.39825,{"cveId":88,"description":89,"publishedDate":90,"cvssScore":9,"cvssVersion":69,"severity":70,"isKev":71,"epssScore":91},"CVE-2001-0554","Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.","2001-08-14",0.38748,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":9,"cvssVersion":69,"severity":70,"isKev":71,"epssScore":96},"CVE-2007-0956","The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a '-' character, a similar issue to CVE-2007-0882.","2007-04-06",0.29842,{"cveId":98,"description":99,"publishedDate":100,"cvssScore":9,"cvssVersion":69,"severity":70,"isKev":71,"epssScore":101},"CVE-2011-0285","The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted request that triggers an error condition.","2011-04-15",0.20765,{"cveId":103,"description":104,"publishedDate":105,"cvssScore":9,"cvssVersion":69,"severity":70,"isKev":71,"epssScore":106},"CVE-2001-0247","Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2) g_lstat, (3) g_stat, and (4) the glob0 buffer as used in the glob functions glob2 and glob3.","2001-06-18",0.19318,{"cveId":108,"description":109,"publishedDate":110,"cvssScore":77,"cvssVersion":69,"severity":78,"isKev":71,"epssScore":111},"CVE-2005-0488","Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command.","2005-06-14",0.17123,{"cveId":113,"description":114,"publishedDate":115,"cvssScore":9,"cvssVersion":69,"severity":70,"isKev":71,"epssScore":116},"CVE-2000-0389","Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.","2000-05-16",0.16503,{"cveId":118,"description":119,"publishedDate":120,"cvssScore":9,"cvssVersion":69,"severity":70,"isKev":71,"epssScore":121},"CVE-2002-1235","The kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (krb5) krb5-1.2.6 and earlier, (2) kadmind in KTH Kerberos 4 (eBones) before 1.2.1, and (3) kadmind in KTH Kerberos 5 (Heimdal) before 0.5.1 when compiled with Kerberos 4 support, does not properly verify the length field of a request, which allows remote attackers to execute arbitrary code via a buffer overflow attack.","2002-11-04",0.15105,[],[124,125,126,127,128,129,130,131,132,133],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},{"id":28,"product_name":29,"version_count":30,"cve_count":30,"kev_count":11,"last_cve_update":31},{"id":33,"product_name":34,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":36},{"id":38,"product_name":39,"version_count":40,"cve_count":35,"kev_count":11,"last_cve_update":41},{"id":43,"product_name":44,"version_count":11,"cve_count":40,"kev_count":11,"last_cve_update":45},{"id":47,"product_name":48,"version_count":11,"cve_count":40,"kev_count":11,"last_cve_update":49},{"id":51,"product_name":52,"version_count":53,"cve_count":40,"kev_count":11,"last_cve_update":54},{"id":56,"product_name":57,"version_count":35,"cve_count":40,"kev_count":11,"last_cve_update":58},{"id":60,"product_name":61,"version_count":40,"cve_count":40,"kev_count":11,"last_cve_update":62},{"title":135,"metaDescription":136,"keywords":137,"structuredData":138},"Mit - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Mit covering 10 products with 157 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Mit vulnerabilities, Mit security, Mit CVE, Mit threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":139,"@type":140,"name":141,"description":136,"url":142},"https:\u002F\u002Fschema.org","Organization","Mit","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmit",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":144,"apiVersion":145},"2026-10-19T16:00:48.447Z","3.0"]