{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2011-12-23T00:00:00", "descriptions": [{"lang": "en", "value": "Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-28T12:57:01", "orgId": "63664ac6-956c-4cba-a5d0-f46076e16109", "shortName": "freebsd"}, "references": [{"name": "SUSE-SU-2012:0042", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00010.html"}, {"name": "47399", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/47399"}, {"name": "DSA-2375", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2011/dsa-2375"}, {"name": "RHSA-2011:1854", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://www.redhat.com/support/errata/RHSA-2011-1854.html"}, {"name": "SUSE-SU-2012:0018", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00004.html"}, {"name": "20111226 MITKRB5-SA-2011-008 buffer overflow in telnetd [CVE-2011-4862]", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://archives.neohapsis.com/archives/bugtraq/2011-12/0172.html"}, {"name": "DSA-2372", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2011/dsa-2372"}, {"name": "47359", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/47359"}, {"name": "FEDORA-2011-17493", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071640.html"}, {"name": "[freebsd-security] 20111223 Merry Christmas from the FreeBSD Security Team", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006120.html"}, {"name": "47374", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/47374"}, {"name": "[freebsd-security] 20111223 Merry Christmas from the FreeBSD Security Team", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006118.html"}, {"name": "FreeBSD-SA-11:08", "tags": ["vendor-advisory", "x_refsource_FREEBSD"], "url": "http://security.freebsd.org/advisories/FreeBSD-SA-11:08.telnetd.asc"}, {"name": "openSUSE-SU-2012:0019", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00005.html"}, {"name": "FEDORA-2011-17492", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071627.html"}, {"name": "MDVSA-2011:195", "tags": ["vendor-advisory", "x_refsource_MANDRIVA"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:195"}, {"name": "SUSE-SU-2012:0024", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00007.html"}, {"name": "SUSE-SU-2012:0050", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00011.html"}, {"name": "78020", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/78020"}, {"name": "1026463", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1026463"}, {"name": "[freebsd-security] 20111223 Merry Christmas from the FreeBSD Security Team", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006117.html"}, {"name": "47341", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/47341"}, {"name": "RHSA-2011:1852", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://www.redhat.com/support/errata/RHSA-2011-1852.html"}, {"name": "RHSA-2011:1853", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://www.redhat.com/support/errata/RHSA-2011-1853.html"}, {"name": "openSUSE-SU-2012:0051", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00014.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://security.freebsd.org/patches/SA-11:08/telnetd.patch"}, {"name": "47357", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/47357"}, {"name": "46239", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/46239"}, {"name": "SUSE-SU-2012:0010", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00002.html"}, {"name": "47397", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/47397"}, {"name": "47373", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/47373"}, {"name": "SUSE-SU-2012:0056", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00015.html"}, {"name": "[freebsd-security] 20111223 Merry Christmas from the FreeBSD Security Team", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006119.html"}, {"name": "47441", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/47441"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://git.savannah.gnu.org/cgit/inetutils.git/commit/?id=665f1e73cdd9b38e2d2e11b8db9958a315935592"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2011-008.txt"}, {"name": "RHSA-2011:1851", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://www.redhat.com/support/errata/RHSA-2011-1851.html"}, {"name": "18280", "tags": ["exploit", "x_refsource_EXPLOIT-DB"], "url": "http://www.exploit-db.com/exploits/18280/"}, {"name": "47348", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/47348"}, {"name": "1026460", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1026460"}, {"name": "DSA-2373", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2011/dsa-2373"}, {"name": "multiple-telnetd-bo(71970)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/71970"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secteam@freebsd.org", "ID": "CVE-2011-4862", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "SUSE-SU-2012:0042", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00010.html"}, {"name": "47399", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/47399"}, {"name": "DSA-2375", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2011/dsa-2375"}, {"name": "RHSA-2011:1854", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2011-1854.html"}, {"name": "SUSE-SU-2012:0018", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00004.html"}, {"name": "20111226 MITKRB5-SA-2011-008 buffer overflow in telnetd [CVE-2011-4862]", "refsource": "BUGTRAQ", "url": "http://archives.neohapsis.com/archives/bugtraq/2011-12/0172.html"}, {"name": "DSA-2372", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2011/dsa-2372"}, {"name": "47359", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/47359"}, {"name": "FEDORA-2011-17493", "refsource": "FEDORA", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071640.html"}, {"name": "[freebsd-security] 20111223 Merry Christmas from the FreeBSD Security Team", "refsource": "MLIST", "url": "http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006120.html"}, {"name": "47374", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/47374"}, {"name": "[freebsd-security] 20111223 Merry Christmas from the FreeBSD Security Team", "refsource": "MLIST", "url": "http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006118.html"}, {"name": "FreeBSD-SA-11:08", "refsource": "FREEBSD", "url": "http://security.freebsd.org/advisories/FreeBSD-SA-11:08.telnetd.asc"}, {"name": "openSUSE-SU-2012:0019", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00005.html"}, {"name": "FEDORA-2011-17492", "refsource": "FEDORA", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071627.html"}, {"name": "MDVSA-2011:195", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:195"}, {"name": "SUSE-SU-2012:0024", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00007.html"}, {"name": "SUSE-SU-2012:0050", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00011.html"}, {"name": "78020", "refsource": "OSVDB", "url": "http://osvdb.org/78020"}, {"name": "1026463", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1026463"}, {"name": "[freebsd-security] 20111223 Merry Christmas from the FreeBSD Security Team", "refsource": "MLIST", "url": "http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006117.html"}, {"name": "47341", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/47341"}, {"name": "RHSA-2011:1852", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2011-1852.html"}, {"name": "RHSA-2011:1853", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2011-1853.html"}, {"name": "openSUSE-SU-2012:0051", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00014.html"}, {"name": "http://security.freebsd.org/patches/SA-11:08/telnetd.patch", "refsource": "CONFIRM", "url": "http://security.freebsd.org/patches/SA-11:08/telnetd.patch"}, {"name": "47357", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/47357"}, {"name": "46239", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/46239"}, {"name": "SUSE-SU-2012:0010", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00002.html"}, {"name": "47397", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/47397"}, {"name": "47373", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/47373"}, {"name": "SUSE-SU-2012:0056", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00015.html"}, {"name": "[freebsd-security] 20111223 Merry Christmas from the FreeBSD Security Team", "refsource": "MLIST", "url": "http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006119.html"}, {"name": "47441", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/47441"}, {"name": "http://git.savannah.gnu.org/cgit/inetutils.git/commit/?id=665f1e73cdd9b38e2d2e11b8db9958a315935592", "refsource": "CONFIRM", "url": "http://git.savannah.gnu.org/cgit/inetutils.git/commit/?id=665f1e73cdd9b38e2d2e11b8db9958a315935592"}, {"name": "http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2011-008.txt", "refsource": "CONFIRM", "url": "http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2011-008.txt"}, {"name": "RHSA-2011:1851", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2011-1851.html"}, {"name": "18280", "refsource": "EXPLOIT-DB", "url": "http://www.exploit-db.com/exploits/18280/"}, {"name": "47348", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/47348"}, {"name": "1026460", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1026460"}, {"name": "DSA-2373", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2011/dsa-2373"}, {"name": "multiple-telnetd-bo(71970)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/71970"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T00:16:35.035Z"}, "title": "CVE Program Container", "references": [{"name": "SUSE-SU-2012:0042", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00010.html"}, {"name": "47399", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/47399"}, {"name": "DSA-2375", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2011/dsa-2375"}, {"name": "RHSA-2011:1854", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://www.redhat.com/support/errata/RHSA-2011-1854.html"}, {"name": "SUSE-SU-2012:0018", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00004.html"}, {"name": "20111226 MITKRB5-SA-2011-008 buffer overflow in telnetd [CVE-2011-4862]", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://archives.neohapsis.com/archives/bugtraq/2011-12/0172.html"}, {"name": "DSA-2372", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2011/dsa-2372"}, {"name": "47359", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/47359"}, {"name": "FEDORA-2011-17493", "tags": ["vendor-advisory", "x_refsource_FEDORA", "x_transferred"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071640.html"}, {"name": "[freebsd-security] 20111223 Merry Christmas from the FreeBSD Security Team", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006120.html"}, {"name": "47374", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/47374"}, {"name": "[freebsd-security] 20111223 Merry Christmas from the FreeBSD Security Team", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006118.html"}, {"name": "FreeBSD-SA-11:08", "tags": ["vendor-advisory", "x_refsource_FREEBSD", "x_transferred"], "url": "http://security.freebsd.org/advisories/FreeBSD-SA-11:08.telnetd.asc"}, {"name": "openSUSE-SU-2012:0019", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00005.html"}, {"name": "FEDORA-2011-17492", "tags": ["vendor-advisory", "x_refsource_FEDORA", "x_transferred"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071627.html"}, {"name": "MDVSA-2011:195", "tags": ["vendor-advisory", "x_refsource_MANDRIVA", "x_transferred"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:195"}, {"name": "SUSE-SU-2012:0024", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00007.html"}, {"name": "SUSE-SU-2012:0050", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00011.html"}, {"name": "78020", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/78020"}, {"name": "1026463", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1026463"}, {"name": "[freebsd-security] 20111223 Merry Christmas from the FreeBSD Security Team", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006117.html"}, {"name": "47341", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/47341"}, {"name": "RHSA-2011:1852", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://www.redhat.com/support/errata/RHSA-2011-1852.html"}, {"name": "RHSA-2011:1853", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://www.redhat.com/support/errata/RHSA-2011-1853.html"}, {"name": "openSUSE-SU-2012:0051", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00014.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://security.freebsd.org/patches/SA-11:08/telnetd.patch"}, {"name": "47357", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/47357"}, {"name": "46239", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/46239"}, {"name": "SUSE-SU-2012:0010", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00002.html"}, {"name": "47397", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/47397"}, {"name": "47373", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/47373"}, {"name": "SUSE-SU-2012:0056", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00015.html"}, {"name": "[freebsd-security] 20111223 Merry Christmas from the FreeBSD Security Team", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006119.html"}, {"name": "47441", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/47441"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://git.savannah.gnu.org/cgit/inetutils.git/commit/?id=665f1e73cdd9b38e2d2e11b8db9958a315935592"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2011-008.txt"}, {"name": "RHSA-2011:1851", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://www.redhat.com/support/errata/RHSA-2011-1851.html"}, {"name": "18280", "tags": ["exploit", "x_refsource_EXPLOIT-DB", "x_transferred"], "url": "http://www.exploit-db.com/exploits/18280/"}, {"name": "47348", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/47348"}, {"name": "1026460", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1026460"}, {"name": "DSA-2373", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2011/dsa-2373"}, {"name": "multiple-telnetd-bo(71970)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/71970"}]}]}, "cveMetadata": {"assignerOrgId": "63664ac6-956c-4cba-a5d0-f46076e16109", "assignerShortName": "freebsd", "cveId": "CVE-2011-4862", "datePublished": "2011-12-25T01:00:00", "dateReserved": "2011-12-19T00:00:00", "dateUpdated": "2024-08-07T00:16:35.035Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:gnu:inetutils:*:*:*:*:*:*:*:*", "matchCriteriaId": "E97F9E08-6311-4AA9-87D7-E498F0FD8AE0", "versionEndExcluding": "1.9", "vulnerable": true}, {"criteria": "cpe:2.3:a:heimdal_project:heimdal:*:*:*:*:*:*:*:*", "matchCriteriaId": "B6C6F35D-BB85-46B3-97F5-AA5C03A0D407", "versionEndIncluding": "1.5.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:mit:krb5-appl:*:*:*:*:*:*:*:*", "matchCriteriaId": "A3818F6F-3087-4097-A008-CC865FC9F4EA", "versionEndIncluding": "1.0.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*", "matchCriteriaId": "37A031E6-89ED-416B-92B5-1D36A44E05BD", "versionEndIncluding": "9.0", "versionStartIncluding": "7.3", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:fedoraproject:fedora:15:*:*:*:*:*:*:*", "matchCriteriaId": "9396E005-22D8-4342-9323-C7DEA379191D", "vulnerable": true}, {"criteria": "cpe:2.3:o:fedoraproject:fedora:16:*:*:*:*:*:*:*", "matchCriteriaId": "706C6399-CAD1-46E3-87A2-8DFE2CF497ED", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*", "matchCriteriaId": "8C757774-08E7-40AA-B532-6F705C8F7639", "vulnerable": true}, {"criteria": "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "036E8A89-7A16-411F-9D31-676313BB7244", "vulnerable": true}, {"criteria": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "16F59A04-14CF-49E2-9973-645477EA09DA", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*", "matchCriteriaId": "5646FDE9-CF21-46A9-B89D-F5BBDB4249AF", "vulnerable": true}, {"criteria": "cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*", "matchCriteriaId": "DE554781-1EB9-446E-911F-6C11970C47F4", "vulnerable": true}, {"criteria": "cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:*:*:-:*:*:*", "matchCriteriaId": "4339DE06-19FB-4B8E-B6AE-3495F605AD05", "vulnerable": true}, {"criteria": "cpe:2.3:o:suse:linux_enterprise_desktop:11:sp1:*:*:*:*:*:*", "matchCriteriaId": "60FBDD82-691C-4D9D-B71B-F9AFF6931B53", "vulnerable": true}, {"criteria": "cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*", "matchCriteriaId": "4CD2D897-E321-4CED-92E0-11A98B52053C", "vulnerable": true}, {"criteria": "cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*", "matchCriteriaId": "22A79A35-05DB-4B9F-AD3E-EA6F933CF10C", "vulnerable": true}, {"criteria": "cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:ltss:*:*:*", "matchCriteriaId": "CED02712-1031-4206-AC4D-E68710F46EC9", "vulnerable": true}, {"criteria": "cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:-:*:*:*", "matchCriteriaId": "D1D7B467-58DD-45F1-9F1F-632620DF072A", "vulnerable": true}, {"criteria": "cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:-:*:*", "matchCriteriaId": "A44C3422-0D42-473E-ABB4-279D7494EE2F", "vulnerable": true}, {"criteria": "cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:-:vmware:*:*", "matchCriteriaId": "544D7864-8F4A-4ABC-AA5E-01F73D273C63", "vulnerable": true}, {"criteria": "cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp4:*:*:*:*:*:*", "matchCriteriaId": "436EF2ED-FDBB-4B64-8EC4-33C3E4253F06", "vulnerable": true}, {"criteria": "cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp1:*:*:*:*:*:*", "matchCriteriaId": "E8C91701-DF37-4F7B-AB9A-B1BFDB4991F8", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer basado en pila en libtelnet/encrypt.c en telnetd en FreeBSD v7.3 hasta v9.0, MIT Kerberos Version v5 Applications (tambi\u00e9n conocido como krb5-appl) v1.0.2 y anteriores, y Heimdal v1.5.1 y anteriores, permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de una clave de cifrado larga, como fue explotado en Diciembre 2011."}], "id": "CVE-2011-4862", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2011-12-25T01:55:02.210", "references": [{"source": "secteam@freebsd.org", "tags": ["Broken Link"], "url": "http://archives.neohapsis.com/archives/bugtraq/2011-12/0172.html"}, {"source": "secteam@freebsd.org", "tags": ["Patch", "Third Party Advisory"], "url": "http://git.savannah.gnu.org/cgit/inetutils.git/commit/?id=665f1e73cdd9b38e2d2e11b8db9958a315935592"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071627.html"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071640.html"}, {"source": "secteam@freebsd.org", "tags": ["Vendor Advisory"], "url": "http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006117.html"}, {"source": "secteam@freebsd.org", "tags": ["Vendor Advisory"], "url": "http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006118.html"}, {"source": "secteam@freebsd.org", "tags": ["Vendor Advisory"], "url": "http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006119.html"}, {"source": "secteam@freebsd.org", "tags": ["Vendor Advisory"], "url": "http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006120.html"}, {"source": "secteam@freebsd.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00002.html"}, {"source": "secteam@freebsd.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00004.html"}, {"source": "secteam@freebsd.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00005.html"}, {"source": "secteam@freebsd.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00007.html"}, {"source": "secteam@freebsd.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00010.html"}, {"source": "secteam@freebsd.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00011.html"}, {"source": "secteam@freebsd.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00014.html"}, {"source": "secteam@freebsd.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00015.html"}, {"source": "secteam@freebsd.org", "tags": ["Broken Link"], "url": "http://osvdb.org/78020"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/46239"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/47341"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/47348"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/47357"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/47359"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/47373"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/47374"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/47397"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/47399"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/47441"}, {"source": "secteam@freebsd.org", "tags": ["Mitigation", "Vendor Advisory"], "url": "http://security.freebsd.org/advisories/FreeBSD-SA-11:08.telnetd.asc"}, {"source": "secteam@freebsd.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://security.freebsd.org/patches/SA-11:08/telnetd.patch"}, {"source": "secteam@freebsd.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2011-008.txt"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory"], "url": "http://www.debian.org/security/2011/dsa-2372"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory"], "url": "http://www.debian.org/security/2011/dsa-2373"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory"], "url": "http://www.debian.org/security/2011/dsa-2375"}, {"source": "secteam@freebsd.org", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "url": "http://www.exploit-db.com/exploits/18280/"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:195"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory"], "url": "http://www.redhat.com/support/errata/RHSA-2011-1851.html"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory"], "url": "http://www.redhat.com/support/errata/RHSA-2011-1852.html"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory"], "url": "http://www.redhat.com/support/errata/RHSA-2011-1853.html"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory"], "url": "http://www.redhat.com/support/errata/RHSA-2011-1854.html"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id?1026460"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id?1026463"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/71970"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://archives.neohapsis.com/archives/bugtraq/2011-12/0172.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "http://git.savannah.gnu.org/cgit/inetutils.git/commit/?id=665f1e73cdd9b38e2d2e11b8db9958a315935592"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071627.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071640.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006117.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006118.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006119.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006120.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00002.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00004.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00005.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00007.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00010.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00011.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00014.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00015.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://osvdb.org/78020"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/46239"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/47341"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/47348"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/47357"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/47359"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/47373"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/47374"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/47397"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/47399"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/47441"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mitigation", "Vendor Advisory"], "url": "http://security.freebsd.org/advisories/FreeBSD-SA-11:08.telnetd.asc"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://security.freebsd.org/patches/SA-11:08/telnetd.patch"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2011-008.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.debian.org/security/2011/dsa-2372"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.debian.org/security/2011/dsa-2373"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.debian.org/security/2011/dsa-2375"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "url": "http://www.exploit-db.com/exploits/18280/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:195"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.redhat.com/support/errata/RHSA-2011-1851.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.redhat.com/support/errata/RHSA-2011-1852.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.redhat.com/support/errata/RHSA-2011-1853.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.redhat.com/support/errata/RHSA-2011-1854.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id?1026460"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id?1026463"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/71970"}], "sourceIdentifier": "secteam@freebsd.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-120"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2011:1853", "cpe": "cpe:/o:redhat:rhel_els:3", "package": "krb5-0:1.2.7-73", "product_name": "Red Hat Enterprise Linux 3 Extended Lifecycle Support", "release_date": "2011-12-28T00:00:00Z"}, {"advisory": "RHSA-2011:1851", "cpe": "cpe:/o:redhat:enterprise_linux:4", "package": "krb5-0:1.3.4-65.el4", "product_name": "Red Hat Enterprise Linux 4", "release_date": "2011-12-27T00:00:00Z"}, {"advisory": "RHSA-2011:1851", "cpe": "cpe:/o:redhat:enterprise_linux:5", "package": "krb5-0:1.6.1-63.el5_7", "product_name": "Red Hat Enterprise Linux 5", "release_date": "2011-12-27T00:00:00Z"}, {"advisory": "RHSA-2011:1853", "cpe": "cpe:/o:redhat:rhel_mission_critical:5.3", "package": "krb5-0:1.6.1-31.el5_3.5", "product_name": "Red Hat Enterprise Linux 5.3 Long Life", "release_date": "2011-12-28T00:00:00Z"}, {"advisory": "RHSA-2011:1853", "cpe": "cpe:/o:redhat:rhel_eus:5.6", "package": "krb5-0:1.6.1-55.el5_6.3", "product_name": "Red Hat Enterprise Linux 5.6 EUS - Server Only", "release_date": "2011-12-28T00:00:00Z"}, {"advisory": "RHSA-2011:1852", "cpe": "cpe:/o:redhat:enterprise_linux:6", "package": "krb5-appl-0:1.0.1-7.el6_2", "product_name": "Red Hat Enterprise Linux 6", "release_date": "2011-12-27T00:00:00Z"}, {"advisory": "RHSA-2011:1854", "cpe": "cpe:/o:redhat:rhel_eus:6.0", "package": "krb5-appl-0:1.0.1-1.el6_0.1", "product_name": "Red Hat Enterprise Linux 6.0 EUS - Server Only", "release_date": "2011-12-28T00:00:00Z"}, {"advisory": "RHSA-2011:1854", "cpe": "cpe:/o:redhat:rhel_eus:6.1", "package": "krb5-appl-0:1.0.1-2.el6_1.3", "product_name": "Red Hat Enterprise Linux 6.1 EUS - Server Only", "release_date": "2011-12-28T00:00:00Z"}], "bugzilla": {"description": "krb5: telnet client and server encrypt_keyid heap-based buffer overflow", "id": "770325", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=770325"}, "csaw": false, "cvss": {"cvss_base_score": "8.3", "cvss_scoring_vector": "AV:A/AC:L/Au:N/C:C/I:C/A:C", "status": "verified"}, "cwe": "CWE-130->CWE-119", "details": ["Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011."], "name": "CVE-2011-4862", "package_state": [{"cpe": "cpe:/o:redhat:rhel_eus:5.3", "fix_state": "Affected", "package_name": "krb5", "product_name": "Red Hat Enterprise Linux Extended Update Support 5.3"}], "public_date": "2011-12-25T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2011-4862\nhttps://nvd.nist.gov/vuln/detail/CVE-2011-4862"], "statement": "A buffer overflow flaw was found in the MIT krb5 telnet daemon (telnetd) as shipped with all supported versions of Red Hat Enterprise Linux. A remote attacker who can access the telnet port of a target machine could use this flaw to execute arbitrary code as root.\nWhile we are aware of public exploits for this issue that include targets for Red Hat Enterprise Linux 3, we are not aware of any yet which would be successful in gaining arbitrary root code execution in Red Hat Enterprise Linux 4, 5, or 6. However it is plausible that one could be created to do so.\nNote that the krb5 telnet daemon is not enabled by default in any version of Red Hat Enterprise Linux. In addition, the default firewall rules block remote access to the telnet port. This flaw does not affect the telnet daemon distributed in the telnet-server package.\nFor users who have enabled the krb5 telnet daemon and have it accessible remotely, they should disable it or apply the updates we have released.\nSince same encryption code is shared between the MIT krb5 telnet daemon and the telnet client, this issue affects the telnet client as well. The updates we have released fixes the issue for both, the telnet daemon and the telnet client.", "threat_severity": "Critical"}