CVE-2011-4862
NoneCVSS
—
EPSS
95.1%
Published
Dec 25, 2011
CISA due date
—
The record
Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | heimdal | 0 | 1.5.dfsg.1-1 |
| Debian:10 | inetutils | 0 | 2:1.8-6 |
| Debian:10 | krb5 | 0 | 1.8+dfsg~aa+r23527-1 |
| Debian:11 | heimdal | 0 | 1.5.dfsg.1-1 |
| Debian:11 | inetutils | 0 | 2:1.8-6 |
| Debian:11 | krb5 | 0 | 1.8+dfsg~aa+r23527-1 |
| Debian:12 | heimdal | 0 | 1.5.dfsg.1-1 |
| Debian:12 | inetutils | 0 | 2:1.8-6 |
| Debian:12 | krb5 | 0 | 1.8+dfsg~aa+r23527-1 |
| Debian:13 | heimdal | 0 | 1.5.dfsg.1-1 |
| Debian:13 | inetutils | 0 | 2:1.8-6 |
| Debian:13 | krb5 | 0 | 1.8+dfsg~aa+r23527-1 |
| Debian:5.0 | heimdal | 0 | 1.2.dfsg.1-2.1+lenny1 |
| Debian:5.0 | inetutils | 0 | 2:1.5.dfsg.1-9+lenny1 |
| Debian:5.0 | krb5 | 0 | 1.6.dfsg.4~beta1-5lenny7 |
| Debian:6.0 | heimdal | 0 | 1.4.0~git20100726.dfsg.1-2+squeeze1 |
| Debian:6.0 | inetutils | 0 | 2:1.6-3.1+squeeze1 |
| Debian:6.0 | krb5-appl | 0 | 1:1.0.1-1.2 |
| Red Hat:enterprise_linux:4::as | krb5 | 0 | 0:1.3.4-65.el4 |
| Red Hat:enterprise_linux:4::as | krb5-debuginfo | 0 | 0:1.3.4-65.el4 |
| Red Hat:enterprise_linux:4::as | krb5-devel | 0 | 0:1.3.4-65.el4 |
| Red Hat:enterprise_linux:4::as | krb5-libs | 0 | 0:1.3.4-65.el4 |
| Red Hat:enterprise_linux:4::as | krb5-server | 0 | 0:1.3.4-65.el4 |
| Red Hat:enterprise_linux:4::as | krb5-workstation | 0 | 0:1.3.4-65.el4 |
| Red Hat:enterprise_linux:4::desktop | krb5 | 0 | 0:1.3.4-65.el4 |
| Red Hat:enterprise_linux:4::desktop | krb5-debuginfo | 0 | 0:1.3.4-65.el4 |
| Red Hat:enterprise_linux:4::desktop | krb5-devel | 0 | 0:1.3.4-65.el4 |
| Red Hat:enterprise_linux:4::desktop | krb5-libs | 0 | 0:1.3.4-65.el4 |
| Red Hat:enterprise_linux:4::desktop | krb5-server | 0 | 0:1.3.4-65.el4 |
| Red Hat:enterprise_linux:4::desktop | krb5-workstation | 0 | 0:1.3.4-65.el4 |
| Red Hat:enterprise_linux:4::es | krb5 | 0 | 0:1.3.4-65.el4 |
| Red Hat:enterprise_linux:4::es | krb5-debuginfo | 0 | 0:1.3.4-65.el4 |
| Red Hat:enterprise_linux:4::es | krb5-devel | 0 | 0:1.3.4-65.el4 |
| Red Hat:enterprise_linux:4::es | krb5-libs | 0 | 0:1.3.4-65.el4 |
| Red Hat:enterprise_linux:4::es | krb5-server | 0 | 0:1.3.4-65.el4 |
| Red Hat:enterprise_linux:4::es | krb5-workstation | 0 | 0:1.3.4-65.el4 |
| Red Hat:enterprise_linux:4::ws | krb5 | 0 | 0:1.3.4-65.el4 |
| Red Hat:enterprise_linux:4::ws | krb5-debuginfo | 0 | 0:1.3.4-65.el4 |
| Red Hat:enterprise_linux:4::ws | krb5-devel | 0 | 0:1.3.4-65.el4 |
| Red Hat:enterprise_linux:4::ws | krb5-libs | 0 | 0:1.3.4-65.el4 |
| Red Hat:enterprise_linux:4::ws | krb5-server | 0 | 0:1.3.4-65.el4 |
| Red Hat:enterprise_linux:4::ws | krb5-workstation | 0 | 0:1.3.4-65.el4 |
| Red Hat:enterprise_linux:5::client | krb5 | 0 | 0:1.6.1-63.el5_7 |
| Red Hat:enterprise_linux:5::client | krb5-debuginfo | 0 | 0:1.6.1-63.el5_7 |
| Red Hat:enterprise_linux:5::client | krb5-devel | 0 | 0:1.6.1-63.el5_7 |
| Red Hat:enterprise_linux:5::client | krb5-libs | 0 | 0:1.6.1-63.el5_7 |
| Red Hat:enterprise_linux:5::client | krb5-server | 0 | 0:1.6.1-63.el5_7 |
| Red Hat:enterprise_linux:5::client | krb5-server-ldap | 0 | 0:1.6.1-63.el5_7 |
| Red Hat:enterprise_linux:5::client | krb5-workstation | 0 | 0:1.6.1-63.el5_7 |
| Red Hat:enterprise_linux:5::client_workstation | krb5 | 0 | 0:1.6.1-63.el5_7 |
| Red Hat:enterprise_linux:5::client_workstation | krb5-debuginfo | 0 | 0:1.6.1-63.el5_7 |
| Red Hat:enterprise_linux:5::client_workstation | krb5-devel | 0 | 0:1.6.1-63.el5_7 |
| Red Hat:enterprise_linux:5::client_workstation | krb5-libs | 0 | 0:1.6.1-63.el5_7 |
| Red Hat:enterprise_linux:5::client_workstation | krb5-server | 0 | 0:1.6.1-63.el5_7 |
| Red Hat:enterprise_linux:5::client_workstation | krb5-server-ldap | 0 | 0:1.6.1-63.el5_7 |
| Red Hat:enterprise_linux:5::client_workstation | krb5-workstation | 0 | 0:1.6.1-63.el5_7 |
| Red Hat:enterprise_linux:5::server | krb5 | 0 | 0:1.6.1-63.el5_7 |
| Red Hat:enterprise_linux:5::server | krb5-debuginfo | 0 | 0:1.6.1-63.el5_7 |
| Red Hat:enterprise_linux:5::server | krb5-devel | 0 | 0:1.6.1-63.el5_7 |
| Red Hat:enterprise_linux:5::server | krb5-libs | 0 | 0:1.6.1-63.el5_7 |
| Red Hat:enterprise_linux:5::server | krb5-server | 0 | 0:1.6.1-63.el5_7 |
| Red Hat:enterprise_linux:5::server | krb5-server-ldap | 0 | 0:1.6.1-63.el5_7 |
| Red Hat:enterprise_linux:5::server | krb5-workstation | 0 | 0:1.6.1-63.el5_7 |
| Red Hat:enterprise_linux:6::client | krb5-appl | 0 | 0:1.0.1-7.el6_2 |
| Red Hat:enterprise_linux:6::client | krb5-appl-clients | 0 | 0:1.0.1-7.el6_2 |
| Red Hat:enterprise_linux:6::client | krb5-appl-debuginfo | 0 | 0:1.0.1-7.el6_2 |
| Red Hat:enterprise_linux:6::client | krb5-appl-servers | 0 | 0:1.0.1-7.el6_2 |
| Red Hat:enterprise_linux:6::computenode | krb5-appl | 0 | 0:1.0.1-7.el6_2 |
| Red Hat:enterprise_linux:6::computenode | krb5-appl-clients | 0 | 0:1.0.1-7.el6_2 |
| Red Hat:enterprise_linux:6::computenode | krb5-appl-debuginfo | 0 | 0:1.0.1-7.el6_2 |
| Red Hat:enterprise_linux:6::computenode | krb5-appl-servers | 0 | 0:1.0.1-7.el6_2 |
| Red Hat:enterprise_linux:6::server | krb5-appl | 0 | 0:1.0.1-7.el6_2 |
| Red Hat:enterprise_linux:6::server | krb5-appl-clients | 0 | 0:1.0.1-7.el6_2 |
| Red Hat:enterprise_linux:6::server | krb5-appl-debuginfo | 0 | 0:1.0.1-7.el6_2 |
| Red Hat:enterprise_linux:6::server | krb5-appl-servers | 0 | 0:1.0.1-7.el6_2 |
| Red Hat:enterprise_linux:6::workstation | krb5-appl | 0 | 0:1.0.1-7.el6_2 |
| Red Hat:enterprise_linux:6::workstation | krb5-appl-clients | 0 | 0:1.0.1-7.el6_2 |
| Red Hat:enterprise_linux:6::workstation | krb5-appl-debuginfo | 0 | 0:1.0.1-7.el6_2 |
| Red Hat:enterprise_linux:6::workstation | krb5-appl-servers | 0 | 0:1.0.1-7.el6_2 |
| Red Hat:rhel_els:3::as | krb5 | 0 | 0:1.2.7-73 |
| Red Hat:rhel_els:3::as | krb5-debuginfo | 0 | 0:1.2.7-73 |
| Red Hat:rhel_els:3::as | krb5-devel | 0 | 0:1.2.7-73 |
| Red Hat:rhel_els:3::as | krb5-libs | 0 | 0:1.2.7-73 |
| Red Hat:rhel_els:3::as | krb5-server | 0 | 0:1.2.7-73 |
| Red Hat:rhel_els:3::as | krb5-workstation | 0 | 0:1.2.7-73 |
| Red Hat:rhel_els:3::es | krb5 | 0 | 0:1.2.7-73 |
| Red Hat:rhel_els:3::es | krb5-debuginfo | 0 | 0:1.2.7-73 |
| Red Hat:rhel_els:3::es | krb5-devel | 0 | 0:1.2.7-73 |
| Red Hat:rhel_els:3::es | krb5-libs | 0 | 0:1.2.7-73 |
| Red Hat:rhel_els:3::es | krb5-server | 0 | 0:1.2.7-73 |
| Red Hat:rhel_els:3::es | krb5-workstation | 0 | 0:1.2.7-73 |
| Red Hat:rhel_eus:5.6 | krb5 | 0 | 0:1.6.1-55.el5_6.3 |
| Red Hat:rhel_eus:5.6 | krb5-debuginfo | 0 | 0:1.6.1-55.el5_6.3 |
| Red Hat:rhel_eus:5.6 | krb5-devel | 0 | 0:1.6.1-55.el5_6.3 |
| Red Hat:rhel_eus:5.6 | krb5-libs | 0 | 0:1.6.1-55.el5_6.3 |
| Red Hat:rhel_eus:5.6 | krb5-server | 0 | 0:1.6.1-55.el5_6.3 |
| Red Hat:rhel_eus:5.6 | krb5-server-ldap | 0 | 0:1.6.1-55.el5_6.3 |
| Red Hat:rhel_eus:5.6 | krb5-workstation | 0 | 0:1.6.1-55.el5_6.3 |
| Red Hat:rhel_eus:6.0 | krb5-appl | 0 | 0:1.0.1-1.el6_0.1 |
| Red Hat:rhel_eus:6.0 | krb5-appl-clients | 0 | 0:1.0.1-1.el6_0.1 |
| Red Hat:rhel_eus:6.0 | krb5-appl-debuginfo | 0 | 0:1.0.1-1.el6_0.1 |
| Red Hat:rhel_eus:6.0 | krb5-appl-servers | 0 | 0:1.0.1-1.el6_0.1 |
| Red Hat:rhel_eus:6.1 | krb5-appl | 0 | 0:1.0.1-2.el6_1.3 |
| Red Hat:rhel_eus:6.1 | krb5-appl-clients | 0 | 0:1.0.1-2.el6_1.3 |
| Red Hat:rhel_eus:6.1 | krb5-appl-debuginfo | 0 | 0:1.0.1-2.el6_1.3 |
| Red Hat:rhel_eus:6.1 | krb5-appl-servers | 0 | 0:1.0.1-2.el6_1.3 |
| Red Hat:rhel_mission_critical:5.3 | krb5 | 0 | 0:1.6.1-31.el5_3.5 |
| Red Hat:rhel_mission_critical:5.3 | krb5-debuginfo | 0 | 0:1.6.1-31.el5_3.5 |
| Red Hat:rhel_mission_critical:5.3 | krb5-devel | 0 | 0:1.6.1-31.el5_3.5 |
| Red Hat:rhel_mission_critical:5.3 | krb5-libs | 0 | 0:1.6.1-31.el5_3.5 |
| Red Hat:rhel_mission_critical:5.3 | krb5-server | 0 | 0:1.6.1-31.el5_3.5 |
| Red Hat:rhel_mission_critical:5.3 | krb5-workstation | 0 | 0:1.6.1-31.el5_3.5 |
Related vulnerabilities
- CVE-2021-40491 The ftp client in GNU Inetutils before 2.2 does not validate addresses returned by… Also affects inetutils
- CVE-2020-28196 MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded… Also affects krb5
- CVE-2009-3295 The prep_reprocess_req function in kdc/do_tgs_req.c in the cross-realm referral… Also affects krb5
- CVE-2008-0062 KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message… Also affects krb5
- CVE-2007-3999 Stack-based buffer overflow in the svcauth_gss_validate function in… Also affects krb5
- CVE-2007-2442 The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and… Also affects krb5
- CVE-2007-0957 Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as… Also affects krb5
- CVE-2007-0956 The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass… Also affects krb5