CVE-2011-4862 in FreeBSD
Summary
Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
12/19/2011
Disclosure
12/24/2011
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 4504 | FreeBSD encrypt.c encrypt_keyid memory corruption | 119 | Attacked | Official fix | CVE-2011-4862 |