Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2005-0468
HistoryMay 02, 2005 - 12:00 a.m.

CVE-2005-0468

2005-05-0200:00:00
ubuntu.com
ubuntu.com
11

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.938 High

EPSS

Percentile

99.1%

JSON

Heap-based buffer overflow in the env_opt_add function in telnet.c for
various BSD-based Telnet clients allows remote attackers to execute
arbitrary code via responses that contain a large number of characters that
require escaping, which consumers more memory than allocated.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchkrb4< 1.2.2-11.3ubuntu4UNKNOWN
ubuntu6.10noarchkrb4< 1.2.2-11.3ubuntu4UNKNOWN
ubuntu6.06noarchkrb5< 1.4.3-5ubuntu0.6UNKNOWN
ubuntu6.10noarchkrb5< 1.4.3-9ubuntu1.5UNKNOWN
ubuntu7.04noarchkrb5< 1.4.4-5ubuntu3.3UNKNOWN

Related

securityvulns 1
debiancve 2
checkpoint_advisories 1
cve 2
openvas 28
nessus 15
debian 4
osv 2
gentoo 3
redhat 2
slackware 1
f5 2
cert 1
freebsd_advisory 1
ubuntucve 1
ubuntu 1
securityvulns
securityvulns
iDEFENSE Security Advisory 03.28.05: Multiple Telnet Client env_opt_add&#40;&#41; Buffer Overflow Vulnerability
2005-03-31 00:00:00
debiancve
debiancve
CVE-2005-0468
2005-05-02 04:00:00
CVE-2005-2040
2005-06-20 04:00:00
checkpoint_advisories
checkpoint_advisories
Multiple Vendor Telnet Client env_opt_add Buffer Overflow (CVE-2005-0468)
2009-10-13 00:00:00
cve
cve
CVE-2005-0468
2005-05-02 04:00:00
CVE-2005-2040
2005-06-20 04:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200504-28 (Heimdal)
2008-09-24 00:00:00
SLES9: Security update for telnet
2009-10-10 00:00:00
SLES9: Security update for heimdal
2009-10-10 00:00:00
nessus
nessus
CentOS 3 : krb5 (CESA-2005:330)
2006-07-03 00:00:00
Fedora Core 2 : krb5-1.3.6-4 (2005-269)
2005-05-19 00:00:00
RHEL 2.1 / 3 / 4 : krb5 (RHSA-2005:330)
2005-03-30 00:00:00
debian
debian
[SECURITY] [DSA 703-1] New krb5 packages fix arbitrary code execution
2005-04-01 16:00:48
[SECURITY] [DSA 703-1] New krb5 packages fix arbitrary code execution
2005-04-01 16:00:48
[SECURITY] [DSA 731-1] New krb4 packages fix arbitrary code execution
2005-06-02 13:42:59
osv
osv
krb5 - buffer overflows
2005-04-01 00:00:00
krb4 - buffer overflows
2005-06-02 00:00:00
gentoo
gentoo
mit-krb5: Multiple buffer overflows in telnet client
2005-04-06 00:00:00
telnet-bsd: Multiple buffer overflows
2005-04-01 00:00:00
Heimdal: Buffer overflow vulnerabilities
2005-04-28 00:00:00
redhat
redhat
(RHSA-2005:327) telnet security update
2005-03-28 00:00:00
(RHSA-2005:330) krb5 security update
2005-03-30 00:00:00
slackware
slackware
telnet client
2005-07-29 21:44:43
f5
f5
BSD telnet vulnerabilities CAN-2005-0468 and CAN-2005-0469
2005-07-21 04:00:00
SOL4441 - BSD telnet vulnerabilities CAN-2005-0468 and CAN-2005-0469
2005-07-20 00:00:00
cert
cert
Multiple Telnet Clients vulnerable to buffer overflow via the env_opt_add() function in telnet.c
2005-04-01 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-05:01.telnet
2005-03-28 00:00:00
ubuntucve
ubuntucve
CVE-2005-2040
2005-06-20 00:00:00
ubuntu
ubuntu
Kerberos vulnerabilities
2005-12-06 00:00:00

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.938 High

EPSS

Percentile

99.1%

JSON
Related for UB:CVE-2005-0468
securityvulns1debiancve2checkpoint_advisories1cve2openvas28nessus15debian4osv2gentoo3redhat2slackware1f52cert1freebsd_advisory1ubuntucve1ubuntu1