Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2011-4862
HistoryDec 25, 2011 - 1:55 a.m.

CVE-2011-4862

2011-12-2501:55:02
CWE-120
[email protected]
web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9 High

AI Score

Confidence

High

0.968 High

EPSS

Percentile

99.7%

JSON

Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.

Affected configurations

NVD
Node
gnuinetutilsRange<1.9
OR
heimdal_projectheimdalRange≤1.5.1
OR
mitkrb5-applRange≤1.0.2
OR
freebsdfreebsdRange7.3–9.0
Node
fedoraprojectfedoraMatch15
OR
fedoraprojectfedoraMatch16
Node
debiandebian_linuxMatch5.0
OR
debiandebian_linuxMatch6.0
OR
debiandebian_linuxMatch7.0
Node
opensuseopensuseMatch11.3
OR
opensuseopensuseMatch11.4
OR
suselinux_enterprise_desktopMatch10sp4-
OR
suselinux_enterprise_desktopMatch11sp1
OR
suselinux_enterprise_serverMatch9
OR
suselinux_enterprise_serverMatch10sp2
OR
suselinux_enterprise_serverMatch10sp3ltss
OR
suselinux_enterprise_serverMatch10sp4-
OR
suselinux_enterprise_serverMatch11sp1-
OR
suselinux_enterprise_serverMatch11sp1-vmware
OR
suselinux_enterprise_software_development_kitMatch10sp4
OR
suselinux_enterprise_software_development_kitMatch11sp1

References

Related

nessus 31
saint 4
packetstorm 4
openvas 40
seebug 1
veracode 1
prion 1
oraclelinux 3
redhat 4
zdt 1
securityvulns 5
freebsd 1
suse 8
centos 2
debian 3
debiancve 1
freebsd_advisory 1
cve 1
gentoo 2
ubuntucve 1
fedora 2
checkpoint_advisories 1
cisco 1
cvelist 1
vmware 2
nessus
nessus
RHEL 6 : krb5-appl (RHSA-2011:1852)
2011-12-28 00:00:00
openSUSE Security Update : krb5-appl (openSUSE-2012-17)
2014-06-13 00:00:00
GLSA-201202-05 : Heimdal: Arbitrary code execution
2012-02-23 00:00:00
saint
saint
Telnetd Encryption Key ID Code Execution
2012-02-11 00:00:00
Telnetd Encryption Key ID Code Execution
2012-02-11 00:00:00
Telnetd Encryption Key ID Code Execution
2012-02-11 00:00:00
packetstorm
packetstorm
FreeBSD telnetd Remote Root
2012-01-16 00:00:00
Linux BSD-derived Telnet Service Encyption Key ID Buffer Overflow
2011-12-28 00:00:00
FreeBSD Telnet Service Encyption Key ID Buffer Overflow
2011-12-28 00:00:00
openvas
openvas
RedHat Update for krb5-appl RHSA-2011:1852-02
2012-07-09 00:00:00
RedHat Update for krb5 RHSA-2011:1851-01
2011-12-30 00:00:00
CentOS Update for krb5-devel CESA-2011:1851 centos5
2012-07-30 00:00:00
seebug
seebug
FreeBSD 'telnetd'守护进程远程缓冲区溢出漏洞
2011-12-26 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 01:05:32
prion
prion
Buffer overflow
2011-12-25 01:55:00
oraclelinux
oraclelinux
krb5-appl security update
2011-12-27 00:00:00
krb5 security update
2011-12-27 00:00:00
krb5 security and bug fix update
2012-03-01 00:00:00
redhat
redhat
(RHSA-2011:1851) Critical: krb5 security update
2011-12-27 00:00:00
(RHSA-2011:1853) Critical: krb5 security update
2011-12-28 00:00:00
(RHSA-2011:1852) Critical: krb5-appl security update
2011-12-27 00:00:00
zdt
zdt
Cisco Ironport WSA telnetd Remote Code Execution Vulnerability
2014-10-24 00:00:00
securityvulns
securityvulns
MITKRB5-SA-2011-008 buffer overflow in telnetd [CVE-2011-4862]
2012-01-02 00:00:00
MIT / FreeBSD / Cisco telnetd buffer overflow
2012-01-30 00:00:00
FreeBSD Security Advisory FreeBSD-SA-11:08.telnetd
2012-01-02 00:00:00
freebsd
freebsd
krb5-appl -- telnetd code execution vulnerability
2011-12-23 00:00:00
suse
suse
Security update for heimdal (important)
2012-01-05 12:08:59
Security update for heimdal (important)
2012-01-05 12:36:30
Security update for Kerberos 5 (important)
2012-01-05 12:36:16
centos
centos
krb5 security update
2011-12-27 20:44:52
krb5 security update
2011-12-27 21:11:42
debian
debian
[SECURITY] [DSA 2372-1] heimdal security update
2011-12-25 17:14:18
[SECURITY] [DSA 2373-1] inetutils security update
2011-12-25 17:15:34
[SECURITY] [DSA 2375-1] krb5. krb5-appl security update
2011-12-26 13:18:10
debiancve
debiancve
CVE-2011-4862
2011-12-25 01:55:02
freebsd_advisory
freebsd_advisory
FreeBSD-SA-11:08.telnetd
2011-12-23 00:00:00
cve
cve
CVE-2011-4862
2011-12-25 01:55:02
gentoo
gentoo
Heimdal: Arbitrary code execution
2012-02-22 00:00:00
MIT Kerberos 5 Applications: Multiple vulnerabilities
2012-01-23 00:00:00
ubuntucve
ubuntucve
CVE-2011-4862
2011-12-25 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: krb5-appl-1.0.2-2.fc16
2012-01-05 21:03:02
[SECURITY] Fedora 15 Update: krb5-appl-1.0.1-8.fc15
2012-01-05 20:57:26
checkpoint_advisories
checkpoint_advisories
Multiple Vendors BSD telnetd Encryption Key Buffer Overflow (CVE-2011-4862)
2012-05-14 00:00:00
cisco
cisco
Cisco IronPort Appliances Telnet Remote Code Execution Vulnerability
2012-01-26 17:00:00
cvelist
cvelist
CVE-2011-4862
2011-12-25 01:00:00
vmware
vmware
VMware ESXi and ESX address several security issues
2012-03-29 00:00:00
VMware ESXi and ESX address several security issues
2012-03-29 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9 High

AI Score

Confidence

High

0.968 High

EPSS

Percentile

99.7%

JSON
Related for NVD:CVE-2011-4862
nessus31saint4packetstorm4openvas40seebug1veracode1prion1oraclelinux3redhat4zdt1securityvulns5freebsd1suse8centos2debian3debiancve1freebsd_advisory1cve1gentoo2ubuntucve1fedora2checkpoint_advisories1cisco1cvelist1vmware2