CVE-2011-4862

Published: Dec 25, 2011Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.

Affected (21)

Products: Freebsd: Freebsd · Gnu: Inetutils · Heimdal Project: Heimdal · +5 more

Show all products

Freebsd: Freebsd · Gnu: Inetutils · Heimdal Project: Heimdal · Mit: Krb5 Appl · Fedoraproject: Fedora · Debian: Debian Linux · Opensuse: Opensuse · Suse: Linux Enterprise Desktop, Linux Enterprise Server, Linux Enterprise Software Development Kit

1 product

1 product

1 product

1 product

1 product

1 product

1 product

3 products

Linux Enterprise Desktop

Linux Enterprise Server

Linux Enterprise Software Development Kit

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	From 7.3 to 9.0
Gnu Inetutils	Before 1.9
Heimdal Project Heimdal	Up to 1.5.1
Mit Krb5 Appl	Up to 1.0.2

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 15
Fedoraproject Fedora	Version 16

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 5.0
Debian Debian Linux	Version 6.0
Debian Debian Linux	Version 7.0

Configuration D

12 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 11.3
Opensuse Opensuse	Version 11.4
Suse Linux Enterprise Desktop	Version 10 sp4
Suse Linux Enterprise Desktop	Version 11 sp1
Suse Linux Enterprise Server	Version 10 sp2
Suse Linux Enterprise Server	Version 10 sp3
Suse Linux Enterprise Server	Version 10 sp4
Suse Linux Enterprise Server	Version 11 sp1
Suse Linux Enterprise Server	Version 11 sp1
Suse Linux Enterprise Server	Version 9
Suse Linux Enterprise Software Development Kit	Version 10 sp4
Suse Linux Enterprise Software Development Kit	Version 11 sp1

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (84)

http://archives.neohapsis.com/archives/bugtraq/2011-12/0172.html

Source: secteam@freebsd.org

Broken Link

http://git.savannah.gnu.org/cgit/inetutils.git/commit/?id=665f1e73cdd9b38e2d2e11b8db9958a315935592

Source: secteam@freebsd.org

PatchThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071627.html

Source: secteam@freebsd.org

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071640.html

Source: secteam@freebsd.org

Third Party Advisory

http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006117.html

Source: secteam@freebsd.org

Vendor Advisory

http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006118.html

Source: secteam@freebsd.org

Vendor Advisory

http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006119.html

Source: secteam@freebsd.org

Vendor Advisory

http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006120.html

Source: secteam@freebsd.org

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00002.html

Source: secteam@freebsd.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00004.html

Source: secteam@freebsd.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00005.html

Source: secteam@freebsd.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00007.html

Source: secteam@freebsd.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00010.html

Source: secteam@freebsd.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00011.html

Source: secteam@freebsd.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00014.html

Source: secteam@freebsd.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00015.html

Source: secteam@freebsd.org

Mailing ListThird Party Advisory

http://osvdb.org/78020

Source: secteam@freebsd.org

Broken Link

http://secunia.com/advisories/46239

Source: secteam@freebsd.org

Third Party Advisory

http://secunia.com/advisories/47341

Source: secteam@freebsd.org

Third Party Advisory

http://secunia.com/advisories/47348

Source: secteam@freebsd.org

Third Party Advisory

http://secunia.com/advisories/47357

Source: secteam@freebsd.org

Third Party Advisory

http://secunia.com/advisories/47359

Source: secteam@freebsd.org

Third Party Advisory

http://secunia.com/advisories/47373

Source: secteam@freebsd.org

Third Party Advisory

http://secunia.com/advisories/47374

Source: secteam@freebsd.org

Third Party Advisory

http://secunia.com/advisories/47397

Source: secteam@freebsd.org

Third Party Advisory

http://secunia.com/advisories/47399

Source: secteam@freebsd.org

Third Party Advisory

http://secunia.com/advisories/47441

Source: secteam@freebsd.org

Third Party Advisory

http://security.freebsd.org/advisories/FreeBSD-SA-11:08.telnetd.asc

Source: secteam@freebsd.org

MitigationVendor Advisory

http://security.freebsd.org/patches/SA-11:08/telnetd.patch

Source: secteam@freebsd.org

PatchVendor Advisory

http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2011-008.txt

Source: secteam@freebsd.org

PatchVendor Advisory

http://www.debian.org/security/2011/dsa-2372

Source: secteam@freebsd.org

Third Party Advisory

http://www.debian.org/security/2011/dsa-2373

Source: secteam@freebsd.org

Third Party Advisory

http://www.debian.org/security/2011/dsa-2375

Source: secteam@freebsd.org

Third Party Advisory

http://www.exploit-db.com/exploits/18280/

Source: secteam@freebsd.org

ExploitThird Party AdvisoryVDB Entry

http://www.mandriva.com/security/advisories?name=MDVSA-2011:195

Source: secteam@freebsd.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2011-1851.html

Source: secteam@freebsd.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2011-1852.html

Source: secteam@freebsd.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2011-1853.html

Source: secteam@freebsd.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2011-1854.html

Source: secteam@freebsd.org

Third Party Advisory

http://www.securitytracker.com/id?1026460

Source: secteam@freebsd.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1026463

Source: secteam@freebsd.org

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/71970

Source: secteam@freebsd.org

Third Party AdvisoryVDB Entry

http://archives.neohapsis.com/archives/bugtraq/2011-12/0172.html