CVE-2011-4862
CRITICAL
10.0
CVSS Severity Score
Vulnerability Description
Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.
Affected Platforms (CPE)
📦
Gnu
Inetutils
< 1.9📦
Heimdal Project
Heimdal
<= 1.5.1📦
Mit
Krb5 Appl
<= 1.0.2💻
Freebsd
Freebsd
>= 7.3 and <= 9.0💻
Fedoraproject
Fedora
= 15💻
Fedoraproject
Fedora
= 16💻
Debian
Debian Linux
= 5.0💻
Debian
Debian Linux
= 6.0💻
Debian
Debian Linux
= 7.0💻
Opensuse
Opensuse
= 11.3💻
Opensuse
Opensuse
= 11.4💻
Suse
Linux Enterprise Desktop
= 10💻
Suse
Linux Enterprise Desktop
= 11💻
Suse
Linux Enterprise Server
= 9💻
Suse
Linux Enterprise Server
= 10💻
Suse
Linux Enterprise Server
= 10💻
Suse
Linux Enterprise Server
= 10💻
Suse
Linux Enterprise Server
= 11💻
Suse
Linux Enterprise Server
= 11💻
Suse
Linux Enterprise Software Development Kit
= 10💻
Suse