CVE-2001-1443: KTH Kerberos IV and Kerberos V (Heimdal) for Telnet clients do not encrypt connections if the server does n...

Security readout for executives and security teams

This flaw affects Kerberos Telnet client behavior: when requested encryption is unavailable on the server, the client may continue without encryption. A person positioned between the client and server could read the session. The sources do not provide CVSS, confirmed affected versions, patch status, or active exploitation evidence. Exposure is most likely in legacy environments still using KTH Kerberos or Heimdal Kerberos Telnet clients, especially across networks where interception is possible. The bundle does not identify exact versions or CPEs. Treat this as a legacy exposure issue. It is not supported by active exploitation evidence, but any remaining Telnet-based administration could expose sensitive communications if intercepted. Mitigation focus: Inventory systems still using Kerberos Telnet clients.; Avoid Telnet use over untrusted or shared networks.; Require encrypted session protection before transmitting sensitive data..

Prepared

Jun 29, 2026, 22:30 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.