Oracle Linux 7 : telnet (ELSA-2020-1334)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1334 advisory. 1:0.17-65 - Resolves: 1814475 - Arbitrary remote code execution in utility.c via short writes or urgent data Tenable has extracted the preceding description blo...

CentOS 6 : telnet (RHSA-2020:1335)

The remote CentOS Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:1335 advisory. - utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer...

Oracle Linux 6 : telnet (ELSA-2020-1335)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1335 advisory. 1:0.17-49 - Resolves: 1814775 - Arbitrary remote code execution in utility.c via short writes or urgent data Tenable has extracted the preceding description blo...

CentOS 6 : krb5-appl (CESA-2020:1349)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1349 advisory. - telnet-server: no bounds checks in nextitem function allows to remotely execute arbitrary code CVE-2020-10188 Note that Nessus has not tested for...

CentOS: Security Advisory for krb5-appl-clients (CESA-2020:1349)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS: Security Advisory for telnet (CESA-2020:1335)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

krb5 security update

CentOS Errata and Security Advisory CESA-2020:1349 An update for krb5-appl is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

8x8 Bounty: Open TURN relay abuse is possible due to lack of peer access control (Critical)

NOTE: This is not an SSRF vulnerability but an open TURN relay vulnerability. Typically, this security vulnerability has at least the same impact as an SSRF. However it is considered more useful from an attacker's point of view since attacks are not restricted to HTTP. - Affects: - █████:443 -...

Scientific Linux Security Update : krb5-appl on SL6.x i386/x86_64 (20200407)

Security Fixes : - telnet-server: no bounds checks in nextitem function allows to remotely execute arbitrary code CVE-2020-10188 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135279; scriptversion"1.6";...

Important: Red Hat Security Advisory: krb5-appl security update

An update for krb5-appl is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code

A vulnerability was found where incorrect bounds checks in the telnet server’s telnetd handling of short writes and urgent data, could lead to information disclosure and corruption of heap data. An unauthenticated remote attacker could exploit these bugs by sending specially crafted telnet packet...

telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code

A vulnerability was found where incorrect bounds checks in the telnet server’s telnetd handling of short writes and urgent data, could lead to information disclosure and corruption of heap data. An unauthenticated remote attacker could exploit these bugs by sending specially crafted telnet packet...

RHEL 8 : telnet (RHSA-2020:1342)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:1342 advisory. Telnet is a popular protocol for logging in to remote systems over the Internet. The telnet-server packages include a telnet service that supports...

Scientific Linux Security Update : telnet on SL6.x i386/x86_64 (20200406)

Security Fixes : - telnet-server: no bounds checks in nextitem function allows to remotely execute arbitrary code CVE-2020-10188 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135262; scriptversion"1.6";...

RHEL 6 : krb5-appl (RHSA-2020:1349)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:1349 advisory. The krb5-appl packages contain Kerberos-aware versions of telnet, ftp, rsh, and rlogin clients and servers. Kerberos is a network authentication syst...

telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code

A vulnerability was found where incorrect bounds checks in the telnet server’s telnetd handling of short writes and urgent data, could lead to information disclosure and corruption of heap data. An unauthenticated remote attacker could exploit these bugs by sending specially crafted telnet packet...

telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code

A vulnerability was found where incorrect bounds checks in the telnet server’s telnetd handling of short writes and urgent data, could lead to information disclosure and corruption of heap data. An unauthenticated remote attacker could exploit these bugs by sending specially crafted telnet packet...

telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code

A vulnerability was found where incorrect bounds checks in the telnet server’s telnetd handling of short writes and urgent data, could lead to information disclosure and corruption of heap data. An unauthenticated remote attacker could exploit these bugs by sending specially crafted telnet packet...

RHEL 7 : telnet (RHSA-2020:1334)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:1334 advisory. Telnet is a popular protocol for logging in to remote systems over the Internet. The telnet-server packages include a telnet service that supports...

CVE-2020-10188

A vulnerability was found where incorrect bounds checks in the telnet server’s telnetd handling of short writes and urgent data, could lead to information disclosure and corruption of heap data. An unauthenticated remote attacker could exploit these bugs by sending specially crafted telnet packet...