CVE-2011-4862

CVE-2011-4862 is a remote pre-authentication buffer overflow in the encryption handling of BSD telnetd: libtelnet/encrypt.c in telnetd on FreeBSD 7.3–9.0, krb5-appl 1.0.2 and earlier, Heimdal 1.5.1 and earlier, and GNU inetutils. The underlying bug allows arbitrary code execution by sending a lon...

CVE-2019-25017

CVE-2019-25017 affects rcp in MIT krb5-appl up to 1.0.3. The server determines which files/directories are sent, while the rcp client performs only cursory validation of object names, allowing a malicious server (or MITM) to overwrite arbitrary files in the client’s target directory; with -r, sub...

CVE-2011-1526

The CVE-2011-1526 issue affects MIT Kerberos Version 5 Applications (krb5-appl) ftpd.c: it does not check the krb5_setegid return value, enabling remote authenticated users to bypass group restrictions and perform create/overwrite/delete/read of files via FTP. The vulnerability is reported in con...

CVE-2019-25018

Technical details for CVE-2019-25018 are not present in the provided documents. No affected product/version or impact is detailed beyond the Initial Description. Monitor for updates.