CVE-2011-4862
Critical
Description
Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.
SeverityCritical
CVSS10.0
Exploit probability—
Product
Gnu Inetutils
PublishedDec 25, 2011
First seenDec 25, 2011
How to fix
Update
- gnu inetutils1.9 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gnu inetutils | v < 1.9 | 1.9 |
| heimdal_project heimdal | v ≤ 1.5.1 | — |
| mit krb5-appl | v ≤ 1.0.2 | — |
| freebsd freebsd | 7.3 ≤ v ≤ 9.0 | — |
| fedoraproject fedora | 15, 16 | — |
| debian debian_linux | 5.0, 6.0, 7.0 | — |
| opensuse opensuse | 11.3, 11.4 | — |
| suse linux_enterprise_desktop | 10, 11 | — |
| suse linux_enterprise_server | 9, 10, 11 | — |
| suse linux_enterprise_software_development_kit | 10, 11 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.