CVE-2011-4862 Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possi...
HighCVSS 10.0
EPSS 95.1%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/heimdal(Debian:12) | < 1.5.dfsg.1-1 | 1.5.dfsg.1-1 |
| debian/heimdal(Debian:13) | < 1.5.dfsg.1-1 | 1.5.dfsg.1-1 |
| debian/heimdal(Debian:14) | < 1.5.dfsg.1-1 | 1.5.dfsg.1-1 |
| debian/inetutils(Debian:12) | < 2:1.8-6 | 2:1.8-6 |
| debian/inetutils(Debian:13) | < 2:1.8-6 | 2:1.8-6 |
| debian/inetutils(Debian:14) | < 2:1.8-6 | 2:1.8-6 |
| debian/krb5(Debian:12) | < 1.8+dfsg~aa+r23527-1 | 1.8+dfsg~aa+r23527-1 |
| debian/krb5(Debian:13) | < 1.8+dfsg~aa+r23527-1 | 1.8+dfsg~aa+r23527-1 |
| debian/krb5(Debian:14) | < 1.8+dfsg~aa+r23527-1 | 1.8+dfsg~aa+r23527-1 |
| GNU Inetutils | < 1.9 | 1.9 |
| heimdal project heimdal | <= 1.5.1 | No fix listed |
| mit krb5-appl | <= 1.0.2 | No fix listed |
| freebsd | >= 7.3, <= 9.0 | No fix listed |
| fedoraproject fedora | = 15 | No fix listed |
| fedoraproject fedora | = 16 | No fix listed |
| debian linux | = 5.0 | No fix listed |
| debian linux | = 6.0 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| opensuse | = 11.3 | No fix listed |
| opensuse | = 11.4 | No fix listed |
| SUSE linux enterprise desktop | = 10-sp4 | No fix listed |
| SUSE linux enterprise desktop | = 11-sp1 | No fix listed |
| SUSE linux enterprise server | = 9 | No fix listed |
| SUSE linux enterprise server | = 10-sp2 | No fix listed |
| SUSE linux enterprise server | = 10-sp3 | No fix listed |
Show 4 more
| Product | Affected versions | Fixed in |
|---|---|---|
| SUSE linux enterprise server | = 10-sp4 | No fix listed |
| SUSE linux enterprise server | = 11-sp1 | No fix listed |
| SUSE linux enterprise software development kit | = 10-sp4 | No fix listed |
| SUSE linux enterprise software development kit | = 11-sp1 | No fix listed |
References
- Debian Security Tracker CVE-2011-4862 vendor-advisory
- 20111226 MITKRB5-SA-2011-008 buffer overflow in telnetd [CVE-2011-4862] broken-link mailing-list
- git.savannah.gnu.org patch third-party-advisory
- FEDORA-2011-17492 third-party-advisory vendor-advisory
- FEDORA-2011-17493 third-party-advisory vendor-advisory
- [freebsd-security] 20111223 Merry Christmas from the FreeBSD Security Team mailing-list vendor-advisory
- [freebsd-security] 20111223 Merry Christmas from the FreeBSD Security Team mailing-list vendor-advisory
- [freebsd-security] 20111223 Merry Christmas from the FreeBSD Security Team mailing-list vendor-advisory
- [freebsd-security] 20111223 Merry Christmas from the FreeBSD Security Team mailing-list vendor-advisory
- SUSE-SU-2012:0010 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2012:0018 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2012:0019 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2012:0024 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2012:0042 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2012:0050 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2012:0051 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2012:0056 mailing-list third-party-advisory vendor-advisory
- 78020 broken-link vdb-entry
- 46239 third-party-advisory
- 47341 third-party-advisory
- 47348 third-party-advisory
- 47357 third-party-advisory
- 47359 third-party-advisory
- 47373 third-party-advisory
- 47374 third-party-advisory
- 47397 third-party-advisory
- 47399 third-party-advisory
- 47441 third-party-advisory
- FreeBSD-SA-11:08 mitigation vendor-advisory
- security.freebsd.org patch vendor-advisory
- web.mit.edu patch vendor-advisory
- DSA-2372 third-party-advisory vendor-advisory
- DSA-2373 third-party-advisory vendor-advisory
- DSA-2375 third-party-advisory vendor-advisory
- 18280 exploit third-party-advisory vdb-entry
- MDVSA-2011:195 third-party-advisory vendor-advisory
- RHSA-2011:1851 third-party-advisory vendor-advisory
- RHSA-2011:1852 third-party-advisory vendor-advisory
- RHSA-2011:1853 third-party-advisory vendor-advisory
- RHSA-2011:1854 third-party-advisory vendor-advisory
- 1026460 third-party-advisory vdb-entry
- 1026463 third-party-advisory vdb-entry
- multiple-telnetd-bo(71970) third-party-advisory vdb-entry