CVE-2005-0469 Buffer overflow in the slc_add_reply function in various BSD-based Telnet clients, when handling LINEMODE suboptions, allows remote attackers to execute arbitrary code via a reply with a large number....
HighCVSS 7.5
EPSS 8.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the slc_add_reply function in various BSD-based Telnet clients, when handling LINEMODE suboptions, allows remote attackers to execute arbitrary code via a reply with a large number of Set Local Character (SLC) commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ncsa telnet | All versions | No fix listed |
| debian/heimdal(Debian:12) | < 0.6.3-10 | 0.6.3-10 |
| debian/heimdal(Debian:13) | < 0.6.3-10 | 0.6.3-10 |
| debian/heimdal(Debian:14) | < 0.6.3-10 | 0.6.3-10 |
| debian/krb5(Debian:12) | < 1.3.6-2 | 1.3.6-2 |
| debian/krb5(Debian:13) | < 1.3.6-2 | 1.3.6-2 |
| debian/krb5(Debian:14) | < 1.3.6-2 | 1.3.6-2 |
| debian/netkit-telnet-ssl(Debian:12) | < 0.17.24+0.1-7.1 | 0.17.24+0.1-7.1 |
| debian/netkit-telnet-ssl(Debian:13) | < 0.17.24+0.1-7.1 | 0.17.24+0.1-7.1 |
| debian/netkit-telnet-ssl(Debian:14) | < 0.17.24+0.1-7.1 | 0.17.24+0.1-7.1 |
References
- 14745 third-party-advisory
- 17899 third-party-advisory
- 101665 vendor-advisory
- 101671 vendor-advisory
- 57755 patch vendor-advisory
- 57761 vendor-advisory
- web.mit.edu patch vendor-advisory
- DSA-731 vendor-advisory
- DSA-697 patch vendor-advisory
- DSA-699 patch vendor-advisory
- DSA-703 patch vendor-advisory
- GLSA-200503-36 patch vendor-advisory
- 20050328 Multiple Telnet Client slc_add_reply() Buffer Overflow Vulnerability patch third-party-advisory vendor-advisory
- VU#291924 third-party-advisory us-government-resource
- MDKSA-2005:061 vendor-advisory
- RHSA-2005:327 patch vendor-advisory
- RHSA-2005:330 patch vendor-advisory
- 12918 vdb-entry
- USN-224-1 vendor-advisory
- oval:org.mitre.oval:def:9708 signature vdb-entry
- Debian Security Tracker CVE-2005-0469 vendor-advisory
- bugs.debian.org issue-tracking