Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet clients allows remote attackers to execute arbitrary code via responses that contain a large number of characters that require escaping, which consumers more memory than allocated.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Telnet | — | Apply OS X security update 2005-003 | Dec 16, 2011 | May 2, 2005 |
| Debian | — | Upgrade krb5 | Jul 30, 2024 | May 2, 2005 |
| Gentoo Linux | — | Upgrade app-crypt/heimdal.Upgrade net-misc/telnet-bsd.Upgrade app-crypt/mit-krb5. | Oct 30, 2017 | May 2, 2005 |
| Suse | — | Upgrade heimdal-develUpgrade heimdalUpgrade telnetUpgrade heimdal-lib-x86Upgrade heimdal-devel-32bitUpgrade heimdal-lib-64bitUpgrade heimdal-libUpgrade heimdal-devel-64bitUpgrade heimdal-lib-32bit | Feb 17, 2015 | May 2, 2005 |
| Ubuntu | — | Upgrade krb5-clientsUpgrade krb5-rsh-server | Nov 8, 2024 | May 2, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub