10 - CVE-2011-4862

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Informations
Name	CVE-2011-4862	First vendor Publication	2011-12-24
Vendor	Cve	Last vendor Modification	2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score	10	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4862

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-120	Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:15084

Oval ID:	oval:org.mitre.oval:def:15084
Title:	DSA-2372-1 heimdal -- buffer overflow
Description:	It was discovered that the Kerberos support for telnetd contains a pre-authentication buffer overflow, which may enable remote attackers who can connect to the Telnet to execute arbitrary code with root privileges.
Family:	unix	Class:	patch
Reference(s):	DSA-2372-1 CVE-2011-4862	Version:	5
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	heimdal
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Installed architecture is all AND heimdal DPKG is earlier than 1.2.dfsg.1-2.1+lenny1 OR Release section Debian 6.0 is installed AND GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND Installed architecture is all AND heimdal DPKG is earlier than 1.4.0~git20100726.dfsg.1-2+squeeze1

Definition Id: oval:org.mitre.oval:def:15151

Oval ID:	oval:org.mitre.oval:def:15151
Title:	DSA-2375-1 krb5 -- buffer overflow
Description:	It was discovered that the encryption support for BSD telnetd contains a pre-authentication buffer overflow, which may enable remote attackers who can connect to the Telnet port to execute arbitrary code with root privileges.
Family:	unix	Class:	patch
Reference(s):	DSA-2375-1 CVE-2011-4862	Version:	5
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	krb5
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Installed architecture is all AND krb5 DPKG is earlier than 1.6.dfsg.4~beta1-5lenny7 OR Release section Debian 6.0 is installed AND GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND Installed architecture is all AND krb5-appl DPKG is earlier than 1.0.1-1.2

Definition Id: oval:org.mitre.oval:def:15184

Oval ID:	oval:org.mitre.oval:def:15184
Title:	DSA-2373-1 inetutils -- buffer overflow
Description:	It was discovered that the Kerberos support for telnetd contains a pre-authentication buffer overflow, which may enable remote attackers who can connect to the Telnet to execute arbitrary code with root privileges.
Family:	unix	Class:	patch
Reference(s):	DSA-2373-1 CVE-2011-4862	Version:	5
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	inetutils
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Installed architecture is all AND inetutils DPKG is earlier than 1.5.dfsg.1-9+lenny1 OR Release section Debian 6.0 is installed AND GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND Installed architecture is all AND inetutils DPKG is earlier than 1.6-3.1+squeeze1

Definition Id: oval:org.mitre.oval:def:20405

Oval ID:	oval:org.mitre.oval:def:20405
Title:	VMware ESXi and ESX address several security issues
Description:	Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4862	Version:	4
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX400-201203407-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201203407-SG is not installed

Definition Id: oval:org.mitre.oval:def:22108

Oval ID:	oval:org.mitre.oval:def:22108
Title:	RHSA-2011:1852: krb5-appl security update (Critical)
Description:	Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:1852-02 CESA-2011:1852 CVE-2011-4862	Version:	4
Platform(s):	Red Hat Enterprise Linux 6 CentOS Linux 6	Product(s):	krb5-appl
Definition Synopsis:
Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND The operating system installed on the system is CentOS Linux 6.x Packages section krb5-appl-clients is earlier than 0:1.0.1-7.el6_2 AND krb5-appl-servers is earlier than 0:1.0.1-7.el6_2 AND krb5-appl is earlier than 0:1.0.1-7.el6_2

Definition Id: oval:org.mitre.oval:def:22146

Oval ID:	oval:org.mitre.oval:def:22146
Title:	RHSA-2011:1851: krb5 security update (Critical)
Description:	Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:1851-02 CESA-2011:1851 CVE-2011-4862	Version:	4
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	krb5
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section krb5-libs is earlier than 0:1.6.1-63.el5_7 AND krb5-devel is earlier than 0:1.6.1-63.el5_7 AND krb5-server is earlier than 0:1.6.1-63.el5_7 AND krb5 is earlier than 0:1.6.1-63.el5_7 AND krb5-workstation is earlier than 0:1.6.1-63.el5_7 AND krb5-server-ldap is earlier than 0:1.6.1-63.el5_7

Definition Id: oval:org.mitre.oval:def:23239

Oval ID:	oval:org.mitre.oval:def:23239
Title:	ELSA-2011:1851: krb5 security update (Critical)
Description:	Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:1851-02 CVE-2011-4862	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	krb5
Definition Synopsis:
Oracle Linux 5.x rpm test krb5-libs is earlier than 0:1.6.1-63.el5_7 AND krb5-devel is earlier than 0:1.6.1-63.el5_7 AND krb5-server is earlier than 0:1.6.1-63.el5_7 AND krb5 is earlier than 0:1.6.1-63.el5_7 AND krb5-workstation is earlier than 0:1.6.1-63.el5_7 AND krb5-server-ldap is earlier than 0:1.6.1-63.el5_7

Definition Id: oval:org.mitre.oval:def:23380

Oval ID:	oval:org.mitre.oval:def:23380
Title:	ELSA-2011:1852: krb5-appl security update (Critical)
Description:	Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:1852-02 CVE-2011-4862	Version:	6
Platform(s):	Oracle Linux 6	Product(s):	krb5-appl
Definition Synopsis:
Oracle Linux 6.x rpm test krb5-appl-clients is earlier than 0:1.0.1-7.el6_2 AND krb5-appl-servers is earlier than 0:1.0.1-7.el6_2 AND krb5-appl is earlier than 0:1.0.1-7.el6_2

Definition Id: oval:org.mitre.oval:def:27975

Oval ID:	oval:org.mitre.oval:def:27975
Title:	DEPRECATED: ELSA-2011-1852 -- krb5-appl security update (critical)
Description:	[1.0.1-7] - Correct patch, bump release [1.0.1-6] - Fix for CVE-2011-4862
Family:	unix	Class:	patch
Reference(s):	ELSA-2011-1852 CVE-2011-4862	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	krb5-appl
Definition Synopsis:
Oracle Linux 6.x Packages match section krb5-appl is earlier than 0:1.0.1-7.el6_2 AND krb5-appl-clients is earlier than 0:1.0.1-7.el6_2 AND krb5-appl-servers is earlier than 0:1.0.1-7.el6_2

CPE : Common Platform Enumeration

Type	Description	Count
Application	Gnu Inetutils cpe:2.3:a:gnu:inetutils::::::::	1
Application	Heimdal Project Heimdal cpe:2.3:a:heimdal_project:heimdal::::::::	1
Application	Mit krb5-Appl cpe:2.3:a:mit:krb5-appl::::::::	1
Os	Debian Debian Linux cpe:2.3:o:debian:debian_linux:7.0:::::::* cpe:2.3:o:debian:debian_linux:6.0:::::::* cpe:2.3:o:debian:debian_linux:5.0:::::::*	3
Os	Fedoraproject Fedora cpe:2.3:o:fedoraproject:fedora:16:::::::* cpe:2.3:o:fedoraproject:fedora:15:::::::*	2
Os	Freebsd cpe:2.3:o:freebsd:freebsd:9.0:beta1:::::: cpe:2.3:o:freebsd:freebsd:9.0:beta2:::::: cpe:2.3:o:freebsd:freebsd:9.0:beta3:::::: cpe:2.3:o:freebsd:freebsd:9.0:-:::::: cpe:2.3:o:freebsd:freebsd:8.4:-:::::: cpe:2.3:o:freebsd:freebsd:8.4:p21:::::: cpe:2.3:o:freebsd:freebsd:8.4:p22:::::: cpe:2.3:o:freebsd:freebsd:8.4:p23:::::: cpe:2.3:o:freebsd:freebsd:8.4:p24:::::: cpe:2.3:o:freebsd:freebsd:8.4:beta1:::::: cpe:2.3:o:freebsd:freebsd:8.4:p16:::::: cpe:2.3:o:freebsd:freebsd:8.4:p2:::::: cpe:2.3:o:freebsd:freebsd:8.4:p27:::::: cpe:2.3:o:freebsd:freebsd:8.4:p30:::::: cpe:2.3:o:freebsd:freebsd:8.4:p8:::::: cpe:2.3:o:freebsd:freebsd:8.4:p11:::::: cpe:2.3:o:freebsd:freebsd:8.4:p12:::::: cpe:2.3:o:freebsd:freebsd:8.4:p13:::::: cpe:2.3:o:freebsd:freebsd:8.4:p14:::::: cpe:2.3:o:freebsd:freebsd:8.4:p33:::::: cpe:2.3:o:freebsd:freebsd:8.4:p34:::::: cpe:2.3:o:freebsd:freebsd:8.4:p4:::::: cpe:2.3:o:freebsd:freebsd:8.4:p7:::::: cpe:2.3:o:freebsd:freebsd:8.4:p19:::::: cpe:2.3:o:freebsd:freebsd:8.4:p15:::::: cpe:2.3:o:freebsd:freebsd:8.4:p17:::::: cpe:2.3:o:freebsd:freebsd:8.4:p20:::::: cpe:2.3:o:freebsd:freebsd:8.4:p26:::::: cpe:2.3:o:freebsd:freebsd:8.4:p3:::::: cpe:2.3:o:freebsd:freebsd:8.4:p9:::::: cpe:2.3:o:freebsd:freebsd:8.3:-:::::: cpe:2.3:o:freebsd:freebsd:8.2:-:::::: cpe:2.3:o:freebsd:freebsd:8.1-prerelease:::::::* cpe:2.3:o:freebsd:freebsd:8.1:-:::::: cpe:2.3:o:freebsd:freebsd:8.1:pre-release:::::: cpe:2.3:o:freebsd:freebsd:8.0:-:::::: cpe:2.3:o:freebsd:freebsd:8.0:p1:::::: cpe:2.3:o:freebsd:freebsd:8.0:p2:::::: cpe:2.3:o:freebsd:freebsd:8.0:p3:::::: cpe:2.3:o:freebsd:freebsd:8.0:p4:::::: cpe:2.3:o:freebsd:freebsd:8.0:p5:::::: cpe:2.3:o:freebsd:freebsd:8.0:p6:::::: cpe:2.3:o:freebsd:freebsd:7.4:-:::::: cpe:2.3:o:freebsd:freebsd:7.3:-:::::: cpe:2.3:o:freebsd:freebsd:7.2:pre-release:::::: cpe:2.3:o:freebsd:freebsd:7.2:stable:::::: cpe:2.3:o:freebsd:freebsd:7.2:-:::::: cpe:2.3:o:freebsd:freebsd:7.1:-:::::: cpe:2.3:o:freebsd:freebsd:7.1:rc1:::::: cpe:2.3:o:freebsd:freebsd:7.1:pre-release:::::: cpe:2.3:o:freebsd:freebsd:7.1:stable:::::: cpe:2.3:o:freebsd:freebsd:7.1:release-p1:::::: cpe:2.3:o:freebsd:freebsd:7.1:release-p2:::::: cpe:2.3:o:freebsd:freebsd:7.1:release-p5:::::: cpe:2.3:o:freebsd:freebsd:7.1:release-p6:::::: cpe:2.3:o:freebsd:freebsd:7.1:release-p4:::::: cpe:2.3:o:freebsd:freebsd:7.1:p1:::::: cpe:2.3:o:freebsd:freebsd:7.1:p10:::::: cpe:2.3:o:freebsd:freebsd:7.1:p12:::::: cpe:2.3:o:freebsd:freebsd:7.1:p13:::::: cpe:2.3:o:freebsd:freebsd:7.1:p14:::::: cpe:2.3:o:freebsd:freebsd:7.1:p15:::::: cpe:2.3:o:freebsd:freebsd:7.1:p16:::::: cpe:2.3:o:freebsd:freebsd:7.1:p2:::::: cpe:2.3:o:freebsd:freebsd:7.1:p3:::::: cpe:2.3:o:freebsd:freebsd:7.1:p4:::::: cpe:2.3:o:freebsd:freebsd:7.1:p5:::::: cpe:2.3:o:freebsd:freebsd:7.1:p6:::::: cpe:2.3:o:freebsd:freebsd:7.1:p7:::::: cpe:2.3:o:freebsd:freebsd:7.1:p8:::::: cpe:2.3:o:freebsd:freebsd:7.1:p9:::::: cpe:2.3:o:freebsd:freebsd:7.1:rc2:::::: cpe:2.3:o:freebsd:freebsd:7.0-release:::::::* cpe:2.3:o:freebsd:freebsd:7.0_releng:::::::* cpe:2.3:o:freebsd:freebsd:7.0_beta4:::::::* cpe:2.3:o:freebsd:freebsd:7.0:-:::::: cpe:2.3:o:freebsd:freebsd:7.0:current:::::: cpe:2.3:o:freebsd:freebsd:7.0:beta_4:::::: cpe:2.3:o:freebsd:freebsd:7.0:pre-release:::::: cpe:2.3:o:freebsd:freebsd:7.0:p6:::::: cpe:2.3:o:freebsd:freebsd:7.0:p1:::::: cpe:2.3:o:freebsd:freebsd:7.0:p3:::::: cpe:2.3:o:freebsd:freebsd:7.0:p4:::::: cpe:2.3:o:freebsd:freebsd:7.0:p5:::::: cpe:2.3:o:freebsd:freebsd:7.0:release-p9:::::: cpe:2.3:o:freebsd:freebsd:7.0:stable:::::: cpe:2.3:o:freebsd:freebsd:7.0:release:::::: cpe:2.3:o:freebsd:freebsd:7.0:release-p8:::::: cpe:2.3:o:freebsd:freebsd:7.0:releng:::::: cpe:2.3:o:freebsd:freebsd:7.0:release-p12:::::: cpe:2.3:o:freebsd:freebsd:6.4:-:::::: cpe:2.3:o:freebsd:freebsd:6.4:stable:::::: cpe:2.3:o:freebsd:freebsd:6.4:release_p4:::::: cpe:2.3:o:freebsd:freebsd:6.4:release:::::: cpe:2.3:o:freebsd:freebsd:6.4:release_p3:::::: cpe:2.3:o:freebsd:freebsd:6.4:release_p2:::::: cpe:2.3:o:freebsd:freebsd:6.4:release_p5:::::: cpe:2.3:o:freebsd:freebsd:6.3_releng:::::::* cpe:2.3:o:freebsd:freebsd:6.3:-:::::: cpe:2.3:o:freebsd:freebsd:6.3:p6:::::: cpe:2.3:o:freebsd:freebsd:6.3:p1:::::: cpe:2.3:o:freebsd:freebsd:6.3:p2:::::: cpe:2.3:o:freebsd:freebsd:6.3:p3:::::: cpe:2.3:o:freebsd:freebsd:6.3:p4:::::: cpe:2.3:o:freebsd:freebsd:6.3:p5:::::: cpe:2.3:o:freebsd:freebsd:6.3:release_p10:::::: cpe:2.3:o:freebsd:freebsd:6.3:release_p11:::::: cpe:2.3:o:freebsd:freebsd:6.3:release_p9:::::: cpe:2.3:o:freebsd:freebsd:6.3:release_p8:::::: cpe:2.3:o:freebsd:freebsd:6.3:release_p6:::::: cpe:2.3:o:freebsd:freebsd:6.2_releng:::::::* cpe:2.3:o:freebsd:freebsd:6.2:stable:::::: cpe:2.3:o:freebsd:freebsd:6.2:-:::::: cpe:2.3:o:freebsd:freebsd:6.2:p1:::::: cpe:2.3:o:freebsd:freebsd:6.2:p4:::::: cpe:2.3:o:freebsd:freebsd:6.2:p5:::::: cpe:2.3:o:freebsd:freebsd:6.2:p6:::::: cpe:2.3:o:freebsd:freebsd:6.1:release:::::: cpe:2.3:o:freebsd:freebsd:6.1:stable:::::: cpe:2.3:o:freebsd:freebsd:6.1:-:::::: cpe:2.3:o:freebsd:freebsd:6.1:release_p10:::::: cpe:2.3:o:freebsd:freebsd:6.1:p1:::::: cpe:2.3:o:freebsd:freebsd:6.1:p2:::::: cpe:2.3:o:freebsd:freebsd:6.1:p9:::::: cpe:2.3:o:freebsd:freebsd:6.1:p10:::::: cpe:2.3:o:freebsd:freebsd:6.1:p11:::::: cpe:2.3:o:freebsd:freebsd:6.1:p12:::::: cpe:2.3:o:freebsd:freebsd:6.1:p13:::::: cpe:2.3:o:freebsd:freebsd:6.1:p16:::::: cpe:2.3:o:freebsd:freebsd:6.1:p17:::::: cpe:2.3:o:freebsd:freebsd:6.1:p18:::::: cpe:2.3:o:freebsd:freebsd:6.1:p7:::::: cpe:2.3:o:freebsd:freebsd:6.1:p4:::::: cpe:2.3:o:freebsd:freebsd:6.1:p6:::::: cpe:2.3:o:freebsd:freebsd:6.0_p5_release:::::::* cpe:2.3:o:freebsd:freebsd:6.0:release:::::: cpe:2.3:o:freebsd:freebsd:6.0:stable:::::: cpe:2.3:o:freebsd:freebsd:6.0:-:::::: cpe:2.3:o:freebsd:freebsd:6:stable:::::: cpe:2.3:o:freebsd:freebsd:5.5_stable:::::::* cpe:2.3:o:freebsd:freebsd:5.5_release:::::::* cpe:2.3:o:freebsd:freebsd:5.5:-:::::: cpe:2.3:o:freebsd:freebsd:5.5:p1:::::: cpe:2.3:o:freebsd:freebsd:5.5:p11:::::: cpe:2.3:o:freebsd:freebsd:5.5:p12:::::: cpe:2.3:o:freebsd:freebsd:5.5:p13:::::: cpe:2.3:o:freebsd:freebsd:5.5:p2:::::: cpe:2.3:o:freebsd:freebsd:5.5:p3:::::: cpe:2.3:o:freebsd:freebsd:5.5:p4:::::: cpe:2.3:o:freebsd:freebsd:5.5:p5:::::: cpe:2.3:o:freebsd:freebsd:5.5:p7:::::: cpe:2.3:o:freebsd:freebsd:5.5:p8:::::: cpe:2.3:o:freebsd:freebsd:5.5:p9:::::: cpe:2.3:o:freebsd:freebsd:5.5:p14:::::: cpe:2.3:o:freebsd:freebsd:5.4:release:::::: cpe:2.3:o:freebsd:freebsd:5.4:pre-release:::::: cpe:2.3:o:freebsd:freebsd:5.4:-:::::: cpe:2.3:o:freebsd:freebsd:5.4:releng:::::: cpe:2.3:o:freebsd:freebsd:5.4:stable:::::: cpe:2.3:o:freebsd:freebsd:5.3:stable:::::: cpe:2.3:o:freebsd:freebsd:5.3:releng:::::: cpe:2.3:o:freebsd:freebsd:5.3:release:::::: cpe:2.3:o:freebsd:freebsd:5.3:-:::::: cpe:2.3:o:freebsd:freebsd:5.2.1:release:::::: cpe:2.3:o:freebsd:freebsd:5.2.1:releng:::::: cpe:2.3:o:freebsd:freebsd:5.2.1:-:::::: cpe:2.3:o:freebsd:freebsd:5.2:-:::::: cpe:2.3:o:freebsd:freebsd:5.1:release_p5:::::: cpe:2.3:o:freebsd:freebsd:5.1:release:::::: cpe:2.3:o:freebsd:freebsd:5.1:releng:::::: cpe:2.3:o:freebsd:freebsd:5.1:alpha:::::: cpe:2.3:o:freebsd:freebsd:5.1:-:::::: cpe:2.3:o:freebsd:freebsd:5.1:release_p1:::::: cpe:2.3:o:freebsd:freebsd:5.0:release_p14:::::: cpe:2.3:o:freebsd:freebsd:5.0:releng:::::: cpe:2.3:o:freebsd:freebsd:5.0:alpha:::::: cpe:2.3:o:freebsd:freebsd:5.0:-:::::: cpe:2.3:o:freebsd:freebsd:5.0:release:::::: cpe:2.3:o:freebsd:freebsd:4.9_prerelease:::::::* cpe:2.3:o:freebsd:freebsd:4.9:pre-release:::::: cpe:2.3:o:freebsd:freebsd:4.9:releng:::::: cpe:2.3:o:freebsd:freebsd:4.9:-:::::: cpe:2.3:o:freebsd:freebsd:4.8_prerelease:::::::* cpe:2.3:o:freebsd:freebsd:4.8:pre-release:::::: cpe:2.3:o:freebsd:freebsd:4.8:releng:::::: cpe:2.3:o:freebsd:freebsd:4.8:release_p6:::::: cpe:2.3:o:freebsd:freebsd:4.8:-:::::: cpe:2.3:o:freebsd:freebsd:4.8:release_p7:::::: cpe:2.3:o:freebsd:freebsd:4.8:release_p2:::::: cpe:2.3:o:freebsd:freebsd:4.8:p7:::::: cpe:2.3:o:freebsd:freebsd:4.8:p6:::::: cpe:2.3:o:freebsd:freebsd:4.8:p2:::::: cpe:2.3:o:freebsd:freebsd:4.7:releng:::::: cpe:2.3:o:freebsd:freebsd:4.7:release:::::: cpe:2.3:o:freebsd:freebsd:4.7:stable:::::: cpe:2.3:o:freebsd:freebsd:4.7:release_p17:::::: cpe:2.3:o:freebsd:freebsd:4.7:-:::::: cpe:2.3:o:freebsd:freebsd:4.6.2:-:::::: cpe:2.3:o:freebsd:freebsd:4.6.1:release_p10:::::: cpe:2.3:o:freebsd:freebsd:4.6.1:release_p1:::::: cpe:2.3:o:freebsd:freebsd:4.6.1:release_p4:::::: cpe:2.3:o:freebsd:freebsd:4.6.1:release_p5:::::: cpe:2.3:o:freebsd:freebsd:4.6.1:release_p7:::::: cpe:2.3:o:freebsd:freebsd:4.6.1:p1:::::: cpe:2.3:o:freebsd:freebsd:4.6.1:p4:::::: cpe:2.3:o:freebsd:freebsd:4.6.1:p7:::::: cpe:2.3:o:freebsd:freebsd:4.6.1:p10:::::: cpe:2.3:o:freebsd:freebsd:4.6.1:p5:::::: cpe:2.3:o:freebsd:freebsd:4.6:stable:::::: cpe:2.3:o:freebsd:freebsd:4.6:release:::::: cpe:2.3:o:freebsd:freebsd:4.6:releng:::::: cpe:2.3:o:freebsd:freebsd:4.6:release_p20:::::: cpe:2.3:o:freebsd:freebsd:4.6:-:::::: cpe:2.3:o:freebsd:freebsd:4.5:stable:::::: cpe:2.3:o:freebsd:freebsd:4.5:release_p32:::::: cpe:2.3:o:freebsd:freebsd:4.5:release:::::: cpe:2.3:o:freebsd:freebsd:4.5:releng:::::: cpe:2.3:o:freebsd:freebsd:4.5:-:::::: cpe:2.3:o:freebsd:freebsd:4.4:release_p42:::::: cpe:2.3:o:freebsd:freebsd:4.4:stable:::::: cpe:2.3:o:freebsd:freebsd:4.4:releng:::::: cpe:2.3:o:freebsd:freebsd:4.4:-:::::: cpe:2.3:o:freebsd:freebsd:4.4:release:::::: cpe:2.3:o:freebsd:freebsd:4.3:releng:::::: cpe:2.3:o:freebsd:freebsd:4.3:release_p38:::::: cpe:2.3:o:freebsd:freebsd:4.3:stable:::::: cpe:2.3:o:freebsd:freebsd:4.3:release:::::: cpe:2.3:o:freebsd:freebsd:4.3:-:::::: cpe:2.3:o:freebsd:freebsd:4.2:stable:::::: cpe:2.3:o:freebsd:freebsd:4.2:::::::* cpe:2.3:o:freebsd:freebsd:4.11_release:::::::* cpe:2.3:o:freebsd:freebsd:4.11_p20_release:::::::* cpe:2.3:o:freebsd:freebsd:4.11:release_p3:::::: cpe:2.3:o:freebsd:freebsd:4.11:releng:::::: cpe:2.3:o:freebsd:freebsd:4.11:stable:::::: cpe:2.3:o:freebsd:freebsd:4.11:-:::::: cpe:2.3:o:freebsd:freebsd:4.10_prerelease:::::::* cpe:2.3:o:freebsd:freebsd:4.10:releng:::::: cpe:2.3:o:freebsd:freebsd:4.10:release:::::: cpe:2.3:o:freebsd:freebsd:4.10:release_p8:::::: cpe:2.3:o:freebsd:freebsd:4.10:-:::::: cpe:2.3:o:freebsd:freebsd:4.1.1:stable:::::: cpe:2.3:o:freebsd:freebsd:4.1.1:release:::::: cpe:2.3:o:freebsd:freebsd:4.1.1:::::::* cpe:2.3:o:freebsd:freebsd:4.1:::::::* cpe:2.3:o:freebsd:freebsd:4.0:releng:::::: cpe:2.3:o:freebsd:freebsd:4.0:::::::* cpe:2.3:o:freebsd:freebsd:4.0:alpha:::::: cpe:2.3:o:freebsd:freebsd:3.5.1:release:::::: cpe:2.3:o:freebsd:freebsd:3.5.1:::::::* cpe:2.3:o:freebsd:freebsd:3.5.1:stable:::::: cpe:2.3:o:freebsd:freebsd:3.5:stable:::::: cpe:2.3:o:freebsd:freebsd:3.5:::::::* cpe:2.3:o:freebsd:freebsd:3.4:::::::* cpe:2.3:o:freebsd:freebsd:3.3:-:::::: cpe:2.3:o:freebsd:freebsd:3.2:::::::* cpe:2.3:o:freebsd:freebsd:3.1:::::::* cpe:2.3:o:freebsd:freebsd:3.0:releng:::::: cpe:2.3:o:freebsd:freebsd:3.0:::::::* cpe:2.3:o:freebsd:freebsd:2.2.8:::::::* cpe:2.3:o:freebsd:freebsd:2.2.7:::::::* cpe:2.3:o:freebsd:freebsd:2.2.6:::::::* cpe:2.3:o:freebsd:freebsd:2.2.5:::::::* cpe:2.3:o:freebsd:freebsd:2.2.4:::::::* cpe:2.3:o:freebsd:freebsd:2.2.3:::::::* cpe:2.3:o:freebsd:freebsd:2.2.2:::::::* cpe:2.3:o:freebsd:freebsd:2.2.1:::::::* cpe:2.3:o:freebsd:freebsd:2.2:::::::* cpe:2.3:o:freebsd:freebsd:2.2:current:::::: cpe:2.3:o:freebsd:freebsd:2.1.7.1:::::::* cpe:2.3:o:freebsd:freebsd:2.1.7:::::::* cpe:2.3:o:freebsd:freebsd:2.1.6.1:::::::* cpe:2.3:o:freebsd:freebsd:2.1.6:::::::* cpe:2.3:o:freebsd:freebsd:2.1.5:::::::* cpe:2.3:o:freebsd:freebsd:2.1.0:::::::* cpe:2.3:o:freebsd:freebsd:2.1:stable:::::: cpe:2.3:o:freebsd:freebsd:2.1:::::::* cpe:2.3:o:freebsd:freebsd:2.0.5:::::::* cpe:2.3:o:freebsd:freebsd:2.0.1:::::::* cpe:2.3:o:freebsd:freebsd:2.0:::::::* cpe:2.3:o:freebsd:freebsd:1.5:::::::* cpe:2.3:o:freebsd:freebsd:1.2:::::::* cpe:2.3:o:freebsd:freebsd:1.1.5.1:::::::* cpe:2.3:o:freebsd:freebsd:1.1.5:::::::* cpe:2.3:o:freebsd:freebsd:1.1:::::::* cpe:2.3:o:freebsd:freebsd:1.0:::::::* cpe:2.3:o:freebsd:freebsd:0.4_1:::::::* cpe:2.3:o:freebsd:freebsd:::::::: cpe:2.3:o:freebsd:freebsd:-:::::::*	289
Os	Opensuse cpe:2.3:o:opensuse:opensuse:11.4:::::::* cpe:2.3:o:opensuse:opensuse:11.3:::::::*	2
Os	Suse Linux Enterprise Desktop cpe:2.3:o:suse:linux_enterprise_desktop:11:sp1:::::: cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:::-:::*	2
Os	Suse Linux Enterprise Server cpe:2.3:o:suse:linux_enterprise_server:11:sp1::::-::* cpe:2.3:o:suse:linux_enterprise_server:11:sp1:::-:vmware:: cpe:2.3:o:suse:linux_enterprise_server:10:sp2:::::: cpe:2.3:o:suse:linux_enterprise_server:10:sp3:::ltss:::* cpe:2.3:o:suse:linux_enterprise_server:10:sp4:::-:::* cpe:2.3:o:suse:linux_enterprise_server:9:::::::*	6
Os	Suse Linux Enterprise Software Development Kit cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp1:::::: cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp4::::::	2

SAINT Exploits

Description	Link
Telnetd Encryption Key ID Code Execution	More info here

OpenVAS Exploits

Date	Description
2012-08-02	Name : SuSE Update for krb5-appl openSUSE-SU-2012:0051-1 (krb5-appl) File : nvt/gb_suse_2012_0051_1.nasl
2012-08-02	Name : SuSE Update for krb5-appl openSUSE-SU-2012:0019-1 (krb5-appl) File : nvt/gb_suse_2012_0019_1.nasl
2012-07-30	Name : CentOS Update for krb5-devel CESA-2011:1851 centos4 File : nvt/gb_CESA-2011_1851_krb5-devel_centos4.nasl
2012-07-30	Name : CentOS Update for krb5-devel CESA-2011:1851 centos5 File : nvt/gb_CESA-2011_1851_krb5-devel_centos5.nasl
2012-07-30	Name : CentOS Update for krb5-appl-clients CESA-2011:1852 centos6 File : nvt/gb_CESA-2011_1852_krb5-appl-clients_centos6.nasl
2012-07-09	Name : RedHat Update for krb5-appl RHSA-2011:1852-02 File : nvt/gb_RHSA-2011_1852-02_krb5-appl.nasl
2012-04-02	Name : VMSA-2012-0006 VMware ESXi and ESX address several security issues File : nvt/gb_VMSA-2012-0006.nasl
2012-03-19	Name : Fedora Update for krb5-appl FEDORA-2011-17493 File : nvt/gb_fedora_2011_17493_krb5-appl_fc16.nasl
2012-03-12	Name : Gentoo Security Advisory GLSA 201202-05 (heimdal) File : nvt/glsa_201202_05.nasl
2012-02-12	Name : Gentoo Security Advisory GLSA 201201-14 (mit-krb5-appl) File : nvt/glsa_201201_14.nasl
2012-02-11	Name : Debian Security Advisory DSA 2373-1 (inetutils) File : nvt/deb_2373_1.nasl
2012-02-11	Name : Debian Security Advisory DSA 2372-1 (heimdal) File : nvt/deb_2372_1.nasl
2012-01-09	Name : Fedora Update for krb5-appl FEDORA-2011-17492 File : nvt/gb_fedora_2011_17492_krb5-appl_fc15.nasl
2011-12-30	Name : RedHat Update for krb5 RHSA-2011:1851-01 File : nvt/gb_RHSA-2011_1851-01_krb5.nasl
2011-12-30	Name : Mandriva Update for krb5-appl MDVSA-2011:195 (krb5-appl) File : nvt/gb_mandriva_MDVSA_2011_195.nasl
2011-12-28	Name : FreeBSD 'telnetd' Daemon Remote Buffer Overflow Vulnerability File : nvt/gb_freebsd_telnetd_51182.nasl
0000-00-00	Name : FreeBSD Ports: krb5-appl File : nvt/freebsd_krb5-appl.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
78020	FreeBSD telnetd Multiple telnet/libtelnet/encrypt.c encrypt_keyid() Function ...

Information Assurance Vulnerability Management (IAVM)

Date	Description
2012-04-12	IAVM : 2012-A-0055 - VMWare ESX 3.5 and ESXi 3.5 Privilege Escalation Vulnerability Severity : Category I - VMSKEY : V0031978
2012-04-12	IAVM : 2012-A-0056 - Multiple Vulnerabilities in VMWare ESX 4.0 and ESXi 4.0 Severity : Category I - VMSKEY : V0031979

Snort® IPS/IDS

Date	Description
2014-01-10	FreeBSD telnetd dec_keyid overflow attempt RuleID : 20813 - Revision : 9 - Type : PROTOCOL-TELNET
2014-01-10	FreeBSD telnetd enc_keyid overflow attempt RuleID : 20812 - Revision : 9 - Type : PROTOCOL-TELNET

Nessus® Vulnerability Scanner

Date	Description
2016-03-03	Name : The remote VMware ESXi / ESX host is missing a security-related patch. File : vmware_VMSA-2012-0006_remote.nasl - Type : ACT_GATHER_INFO
2015-01-19	Name : The remote Solaris system is missing a security patch for third-party software. File : solaris11_telnet_20120404.nasl - Type : ACT_GATHER_INFO
2014-11-26	Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2011-0015.nasl - Type : ACT_GATHER_INFO
2014-11-17	Name : The remote security appliance is missing a vendor-supplied patch. File : cisco-sa-20120126-wsa.nasl - Type : ACT_GATHER_INFO
2014-11-17	Name : The remote security appliance is missing a vendor-supplied patch. File : cisco-sa-20120126-sma.nasl - Type : ACT_GATHER_INFO
2014-11-17	Name : The remote security appliance is missing a vendor-supplied security patch. File : cisco-sa-20120126-esa.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_krb5-appl-111229.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_krb5-appl-111229.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2012-17.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-1851.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-1852.nasl - Type : ACT_GATHER_INFO
2013-01-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1853.nasl - Type : ACT_GATHER_INFO
2013-01-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1854.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20111227_krb5_appl_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20111227_krb5_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-03-30	Name : The remote VMware ESXi / ESX host is missing one or more security-related pat... File : vmware_VMSA-2012-0006.nasl - Type : ACT_GATHER_INFO
2012-02-23	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201202-05.nasl - Type : ACT_GATHER_INFO
2012-01-24	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201201-14.nasl - Type : ACT_GATHER_INFO
2012-01-12	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2372.nasl - Type : ACT_GATHER_INFO
2012-01-12	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2373.nasl - Type : ACT_GATHER_INFO
2012-01-12	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2375.nasl - Type : ACT_GATHER_INFO
2012-01-06	Name : The remote Fedora host is missing a security update. File : fedora_2011-17493.nasl - Type : ACT_GATHER_INFO
2012-01-06	Name : The remote Fedora host is missing a security update. File : fedora_2011-17492.nasl - Type : ACT_GATHER_INFO
2012-01-03	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_krb5-111229.nasl - Type : ACT_GATHER_INFO
2012-01-03	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_krb5-7899.nasl - Type : ACT_GATHER_INFO
2011-12-29	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2011-195.nasl - Type : ACT_GATHER_INFO
2011-12-28	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2011-1852.nasl - Type : ACT_GATHER_INFO
2011-12-28	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1851.nasl - Type : ACT_GATHER_INFO
2011-12-28	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2011-1851.nasl - Type : ACT_GATHER_INFO
2011-12-28	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1852.nasl - Type : ACT_GATHER_INFO
2011-12-27	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_4ddc78dc300a11e1a2aa0016ce01e285.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source	Url

Alert History

If you want to see full details history, please login or register.

Date	Informations
2024-11-28 23:03:15	Multiple Updates
2024-11-28 12:28:04	Multiple Updates
2024-08-02 12:18:21	Multiple Updates
2024-08-02 01:05:23	Multiple Updates
2024-02-16 12:16:18	Multiple Updates
2024-02-15 01:16:51	Multiple Updates
2024-02-02 01:17:50	Multiple Updates
2024-02-01 12:05:15	Multiple Updates
2024-01-13 01:16:06	Multiple Updates
2023-09-05 12:16:44	Multiple Updates
2023-09-05 01:05:07	Multiple Updates
2023-09-02 12:16:49	Multiple Updates
2023-09-02 01:05:13	Multiple Updates
2023-08-12 12:20:27	Multiple Updates
2023-08-12 01:05:14	Multiple Updates
2023-08-11 12:16:55	Multiple Updates
2023-08-11 01:05:24	Multiple Updates
2023-08-06 12:16:16	Multiple Updates
2023-08-06 01:05:14	Multiple Updates
2023-08-04 12:16:20	Multiple Updates
2023-08-04 01:05:15	Multiple Updates
2023-07-14 12:16:19	Multiple Updates
2023-07-14 01:05:12	Multiple Updates
2023-03-29 01:18:15	Multiple Updates
2023-03-28 12:05:20	Multiple Updates
2022-12-15 01:14:06	Multiple Updates
2022-10-11 12:14:34	Multiple Updates
2022-10-11 01:04:56	Multiple Updates
2021-05-05 01:09:51	Multiple Updates
2021-05-04 12:18:54	Multiple Updates
2021-04-22 01:22:36	Multiple Updates
2021-02-09 17:22:49	Multiple Updates
2021-02-04 00:22:45	Multiple Updates
2021-02-03 01:07:53	Multiple Updates
2020-05-23 13:16:58	Multiple Updates
2020-05-23 01:47:40	Multiple Updates
2020-05-23 00:32:21	Multiple Updates
2019-03-19 12:04:45	Multiple Updates
2017-08-29 09:23:37	Multiple Updates
2017-07-22 12:02:03	Multiple Updates
2016-06-28 18:55:41	Multiple Updates
2016-04-26 21:18:27	Multiple Updates
2016-03-04 13:26:25	Multiple Updates
2015-01-21 13:25:05	Multiple Updates
2014-11-27 13:28:00	Multiple Updates
2014-11-18 13:25:58	Multiple Updates
2014-06-14 13:32:02	Multiple Updates
2014-02-17 11:06:34	Multiple Updates
2014-01-19 21:28:15	Multiple Updates
2013-11-11 12:39:40	Multiple Updates
2013-07-17 21:18:45	Multiple Updates
2013-05-10 23:12:02	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	9
CPE ID(s)	309
Sources(s)	42
Saint Exploit(s)	1
osvdb(s)	1
Openvas Exploit(s)	17
IAVM(s)	2
Snort® Rule(s)	2
Nessus® Exploit(s)	31

	Related
10	VMSA-2012-0006
10	RHSA-2011:1854
10	RHSA-2011:1853
10	RHSA-2011:1852
10	RHSA-2011:1851
10	MDVSA-2011:195
10	GLSA-201202-05
10	GLSA-201201-14
10	DSA-2375
10	DSA-2373
10	DSA-2372
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 11 more Alert(s)