CVE-2011-4862 in FreeBSD
Résumé (Anglaise)
Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.
Réserver
19/12/2011
Divulgation
24/12/2011
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 4504 | FreeBSD encrypt.c encrypt_keyid buffer overflow | 119 | Attaqué | Correctif officiel | CVE-2011-4862 |