Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet clients allows remote attackers to execute arbitrary code via responses that contain a large number of characters that require escaping, which consumers more memory than allocated.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Telnet | — | Apply OS X security update 2005-003 | Dec 16, 2011 | May 2, 2005 |
| Debian | — | Upgrade krb5 | Jul 30, 2024 | May 2, 2005 |
| Gentoo Linux | — | Upgrade app-crypt/mit-krb5.Upgrade app-crypt/heimdal.Upgrade net-misc/telnet-bsd. | Oct 30, 2017 | May 2, 2005 |
| Suse | — | Upgrade heimdal-devel-64bitUpgrade heimdal-devel-32bitUpgrade heimdal-lib-32bitUpgrade heimdal-libUpgrade heimdal-lib-64bitUpgrade heimdalUpgrade telnetUpgrade heimdal-lib-x86Upgrade heimdal-devel | Feb 17, 2015 | May 2, 2005 |
| Ubuntu | — | Upgrade krb5-clientsUpgrade krb5-rsh-server | Nov 8, 2024 | May 2, 2005 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub