Lucene search

K
freebsdFreeBSD4DDC78DC-300A-11E1-A2AA-0016CE01E285
HistoryDec 23, 2011 - 12:00 a.m.

krb5-appl -- telnetd code execution vulnerability

2011-12-2300:00:00
vuxml.freebsd.org
18

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.968 High

EPSS

Percentile

99.7%

The MIT Kerberos Team reports:

When an encryption key is supplied via the TELNET protocol,
its length is not validated before the key is copied into a
fixed-size buffer. Also see MITKRB5-SA-2011-008.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchfreebsd= 7.3UNKNOWN
FreeBSDanynoarchfreebsd< 7.3_9UNKNOWN
FreeBSDanynoarchkrb5-appl< 1.0.2_1UNKNOWN

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.968 High

EPSS

Percentile

99.7%