CVE-2005-0468 Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet clients allows remote attackers to execute arbitrary code via responses that contain a large number of c...
HighCVSS 7.5
EPSS 27.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet clients allows remote attackers to execute arbitrary code via responses that contain a large number of characters that require escaping, which consumers more memory than allocated.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ncsa telnet | = c | No fix listed |
| debian/krb5(Debian:12) | < 1.3.6-2 | 1.3.6-2 |
| debian/krb5(Debian:13) | < 1.3.6-2 | 1.3.6-2 |
| debian/krb5(Debian:14) | < 1.3.6-2 | 1.3.6-2 |
References
- Debian Security Tracker CVE-2005-0468 vendor-advisory
- CLA-2005:962 vendor-advisory
- 14745 third-party-advisory
- 17899 third-party-advisory
- 101665 vendor-advisory
- 101671 vendor-advisory
- 57755 vendor-advisory
- 57761 vendor-advisory
- web.mit.edu patch vendor-advisory
- DSA-731 vendor-advisory
- DSA-703 patch vendor-advisory
- 20050328 Multiple Telnet Client env_opt_add() Buffer Overflow Vulnerability third-party-advisory vendor-advisory
- VU#341908 third-party-advisory us-government-resource
- MDKSA-2005:061 vendor-advisory
- RHSA-2005:327 patch vendor-advisory
- RHSA-2005:330 patch vendor-advisory
- 12919 vdb-entry
- USN-224-1 vendor-advisory
- oval:org.mitre.oval:def:9640 signature vdb-entry