CVE-2005-0468
NoneCVSS
—
EPSS
27.1%
Published
May 2, 2005
CISA due date
—
The record
Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet clients allows remote attackers to execute arbitrary code via responses that contain a large number of characters that require escaping, which consumers more memory than allocated.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | krb5 | 0 | 1.3.6-2 |
| Debian:12 | krb5 | 0 | 1.3.6-2 |
| Debian:13 | krb5 | 0 | 1.3.6-2 |
| Debian:3.0 | krb4 | 0 | 1.1-8-2.4 |
| Debian:3.0 | krb5 | 0 | 1.2.4-5woody8 |
| Red Hat:enterprise_linux:3::as | krb5 | 0 | 0:1.2.7-42 |
| Red Hat:enterprise_linux:3::as | krb5-debuginfo | 0 | 0:1.2.7-42 |
| Red Hat:enterprise_linux:3::as | krb5-devel | 0 | 0:1.2.7-42 |
| Red Hat:enterprise_linux:3::as | krb5-libs | 0 | 0:1.2.7-42 |
| Red Hat:enterprise_linux:3::as | krb5-server | 0 | 0:1.2.7-42 |
| Red Hat:enterprise_linux:3::as | krb5-workstation | 0 | 0:1.2.7-42 |
| Red Hat:enterprise_linux:3::as | telnet | 0 | 1:0.17-26.EL3.2 |
| Red Hat:enterprise_linux:3::as | telnet-debuginfo | 0 | 1:0.17-26.EL3.2 |
| Red Hat:enterprise_linux:3::as | telnet-server | 0 | 1:0.17-26.EL3.2 |
| Red Hat:enterprise_linux:3::desktop | krb5 | 0 | 0:1.2.7-42 |
| Red Hat:enterprise_linux:3::desktop | krb5-debuginfo | 0 | 0:1.2.7-42 |
| Red Hat:enterprise_linux:3::desktop | krb5-devel | 0 | 0:1.2.7-42 |
| Red Hat:enterprise_linux:3::desktop | krb5-libs | 0 | 0:1.2.7-42 |
| Red Hat:enterprise_linux:3::desktop | krb5-server | 0 | 0:1.2.7-42 |
| Red Hat:enterprise_linux:3::desktop | krb5-workstation | 0 | 0:1.2.7-42 |
| Red Hat:enterprise_linux:3::desktop | telnet | 0 | 1:0.17-26.EL3.2 |
| Red Hat:enterprise_linux:3::desktop | telnet-debuginfo | 0 | 1:0.17-26.EL3.2 |
| Red Hat:enterprise_linux:3::desktop | telnet-server | 0 | 1:0.17-26.EL3.2 |
| Red Hat:enterprise_linux:3::es | krb5 | 0 | 0:1.2.7-42 |
| Red Hat:enterprise_linux:3::es | krb5-debuginfo | 0 | 0:1.2.7-42 |
| Red Hat:enterprise_linux:3::es | krb5-devel | 0 | 0:1.2.7-42 |
| Red Hat:enterprise_linux:3::es | krb5-libs | 0 | 0:1.2.7-42 |
| Red Hat:enterprise_linux:3::es | krb5-server | 0 | 0:1.2.7-42 |
| Red Hat:enterprise_linux:3::es | krb5-workstation | 0 | 0:1.2.7-42 |
| Red Hat:enterprise_linux:3::es | telnet | 0 | 1:0.17-26.EL3.2 |
| Red Hat:enterprise_linux:3::es | telnet-debuginfo | 0 | 1:0.17-26.EL3.2 |
| Red Hat:enterprise_linux:3::es | telnet-server | 0 | 1:0.17-26.EL3.2 |
| Red Hat:enterprise_linux:3::ws | krb5 | 0 | 0:1.2.7-42 |
| Red Hat:enterprise_linux:3::ws | krb5-debuginfo | 0 | 0:1.2.7-42 |
| Red Hat:enterprise_linux:3::ws | krb5-devel | 0 | 0:1.2.7-42 |
| Red Hat:enterprise_linux:3::ws | krb5-libs | 0 | 0:1.2.7-42 |
| Red Hat:enterprise_linux:3::ws | krb5-server | 0 | 0:1.2.7-42 |
| Red Hat:enterprise_linux:3::ws | krb5-workstation | 0 | 0:1.2.7-42 |
| Red Hat:enterprise_linux:3::ws | telnet | 0 | 1:0.17-26.EL3.2 |
| Red Hat:enterprise_linux:3::ws | telnet-debuginfo | 0 | 1:0.17-26.EL3.2 |
| Red Hat:enterprise_linux:3::ws | telnet-server | 0 | 1:0.17-26.EL3.2 |
| Red Hat:enterprise_linux:4::as | krb5 | 0 | 0:1.3.4-12 |
| Red Hat:enterprise_linux:4::as | krb5-debuginfo | 0 | 0:1.3.4-12 |
| Red Hat:enterprise_linux:4::as | krb5-devel | 0 | 0:1.3.4-12 |
| Red Hat:enterprise_linux:4::as | krb5-libs | 0 | 0:1.3.4-12 |
| Red Hat:enterprise_linux:4::as | krb5-server | 0 | 0:1.3.4-12 |
| Red Hat:enterprise_linux:4::as | krb5-workstation | 0 | 0:1.3.4-12 |
| Red Hat:enterprise_linux:4::as | telnet | 0 | 1:0.17-31.EL4.2 |
| Red Hat:enterprise_linux:4::as | telnet-debuginfo | 0 | 1:0.17-31.EL4.2 |
| Red Hat:enterprise_linux:4::as | telnet-server | 0 | 1:0.17-31.EL4.2 |
| Red Hat:enterprise_linux:4::desktop | krb5 | 0 | 0:1.3.4-12 |
| Red Hat:enterprise_linux:4::desktop | krb5-debuginfo | 0 | 0:1.3.4-12 |
| Red Hat:enterprise_linux:4::desktop | krb5-devel | 0 | 0:1.3.4-12 |
| Red Hat:enterprise_linux:4::desktop | krb5-libs | 0 | 0:1.3.4-12 |
| Red Hat:enterprise_linux:4::desktop | krb5-server | 0 | 0:1.3.4-12 |
| Red Hat:enterprise_linux:4::desktop | krb5-workstation | 0 | 0:1.3.4-12 |
| Red Hat:enterprise_linux:4::desktop | telnet | 0 | 1:0.17-31.EL4.2 |
| Red Hat:enterprise_linux:4::desktop | telnet-debuginfo | 0 | 1:0.17-31.EL4.2 |
| Red Hat:enterprise_linux:4::desktop | telnet-server | 0 | 1:0.17-31.EL4.2 |
| Red Hat:enterprise_linux:4::es | krb5 | 0 | 0:1.3.4-12 |
| Red Hat:enterprise_linux:4::es | krb5-debuginfo | 0 | 0:1.3.4-12 |
| Red Hat:enterprise_linux:4::es | krb5-devel | 0 | 0:1.3.4-12 |
| Red Hat:enterprise_linux:4::es | krb5-libs | 0 | 0:1.3.4-12 |
| Red Hat:enterprise_linux:4::es | krb5-server | 0 | 0:1.3.4-12 |
| Red Hat:enterprise_linux:4::es | krb5-workstation | 0 | 0:1.3.4-12 |
| Red Hat:enterprise_linux:4::es | telnet | 0 | 1:0.17-31.EL4.2 |
| Red Hat:enterprise_linux:4::es | telnet-debuginfo | 0 | 1:0.17-31.EL4.2 |
| Red Hat:enterprise_linux:4::es | telnet-server | 0 | 1:0.17-31.EL4.2 |
| Red Hat:enterprise_linux:4::ws | krb5 | 0 | 0:1.3.4-12 |
| Red Hat:enterprise_linux:4::ws | krb5-debuginfo | 0 | 0:1.3.4-12 |
| Red Hat:enterprise_linux:4::ws | krb5-devel | 0 | 0:1.3.4-12 |
| Red Hat:enterprise_linux:4::ws | krb5-libs | 0 | 0:1.3.4-12 |
| Red Hat:enterprise_linux:4::ws | krb5-server | 0 | 0:1.3.4-12 |
| Red Hat:enterprise_linux:4::ws | krb5-workstation | 0 | 0:1.3.4-12 |
| Red Hat:enterprise_linux:4::ws | telnet | 0 | 1:0.17-31.EL4.2 |
| Red Hat:enterprise_linux:4::ws | telnet-debuginfo | 0 | 1:0.17-31.EL4.2 |
| Red Hat:enterprise_linux:4::ws | telnet-server | 0 | 1:0.17-31.EL4.2 |
Related vulnerabilities
- CVE-2024-37371 In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads… Also affects krb5
- CVE-2024-37370 In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra… Also affects krb5
- CVE-2024-26461 Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in… Also affects krb5
- CVE-2024-26458 Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c. Also affects krb5
- CVE-2020-28196 MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded… Also affects krb5
- CVE-2016-3119 The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the… Also affects krb5
- CVE-2014-5351 The kadm5_randkey_principal_3 function in lib/kadm5/srv/svr_principal.c in kadmind in MIT… Also affects krb5
- CVE-2002-2443 schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does… Also affects krb5