CVE-2011-4862 : 상세 정보

Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.

관련 약점

메트릭

EPSS

EPSS 점수

EPSS 백분위수

익스플로잇 정보

Exploit Database EDB-ID : 18369

게시일 : 2012-01-13 23h00 +00:00
저자 : Metasploit
EDB 검증됨 : Yes

Exploit Database EDB-ID : 18368

게시일 : 2012-01-13 23h00 +00:00
저자 : Metasploit
EDB 검증됨 : Yes

Exploit Database EDB-ID : 18280

게시일 : 2011-12-25 23h00 +00:00
저자 : NighterMan & BatchDrake
EDB 검증됨 : Yes

언급된 제품

구성 0

Gnu>>Inetutils >> Version 까지 (미포함) 1.9

Heimdal_project>>Heimdal >> Version 까지 (포함) 1.5.1

Mit>>Krb5-appl >> Version 까지 (포함) 1.0.2

Freebsd>>Freebsd >> Version 부터 (포함) 7.3 까지 (포함) 9.0

구성 0

Fedoraproject>>Fedora >> Version 15

Fedoraproject>>Fedora >> Version 16

구성 0

Debian>>Debian_linux >> Version 5.0

Debian>>Debian_linux >> Version 6.0

Debian>>Debian_linux >> Version 7.0

구성 0

Opensuse>>Opensuse >> Version 11.3

Opensuse>>Opensuse >> Version 11.4

Suse>>Linux_enterprise_desktop >> Version 10

Suse>>Linux_enterprise_desktop >> Version 11

Suse>>Linux_enterprise_server >> Version 9

Suse>>Linux_enterprise_server >> Version 10

Suse>>Linux_enterprise_server >> Version 10

Suse>>Linux_enterprise_server >> Version 10

Suse>>Linux_enterprise_server >> Version 11

Suse>>Linux_enterprise_server >> Version 11

Suse>>Linux_enterprise_software_development_kit >> Version 10

Suse>>Linux_enterprise_software_development_kit >> Version 11

참고 자료