CVE-2011-4862
Fixed in a distro release EPSS 95%
Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.
Products: gnu inetutils, heimdal_project heimdal, mit krb5-appl, freebsd, fedoraproject fedora, debian_linux, opensuse, suse linux_enterprise_desktop, suse linux_enterprise_server, suse linux_enterprise_software_development_kit
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | heimdal | 1.5.dfsg.1-1 |
| Debian 12 | inetutils | 2:1.8-6 |
| Debian 12 | krb5 | 1.8+dfsg~aa+r23527-1 |
| Debian 13 | heimdal | 1.5.dfsg.1-1 |
| Debian 13 | inetutils | 2:1.8-6 |
| Debian 13 | krb5 | 1.8+dfsg~aa+r23527-1 |
| Debian 14 | heimdal | 1.5.dfsg.1-1 |
| Debian 14 | inetutils | 2:1.8-6 |
| Debian 14 | krb5 | 1.8+dfsg~aa+r23527-1 |
| Debian 5.0 | heimdal | 1.2.dfsg.1-2.1+lenny1 |
| Debian 5.0 | inetutils | 2:1.5.dfsg.1-9+lenny1 |
| Debian 5.0 | krb5 | 1.6.dfsg.4~beta1-5lenny7 |
| Debian 6.0 | heimdal | 1.4.0~git20100726.dfsg.1-2+squeeze1 |
| Debian 6.0 | inetutils | 2:1.6-3.1+squeeze1 |
| Debian 6.0 | krb5-appl | 1:1.0.1-1.2 |
| Red Hat Enterprise Linux 4 | krb5 | 0:1.3.4-65.el4 |
| Red Hat Enterprise Linux 4 | krb5-debuginfo | 0:1.3.4-65.el4 |
| Red Hat Enterprise Linux 4 | krb5-devel | 0:1.3.4-65.el4 |
| Red Hat Enterprise Linux 4 | krb5-libs | 0:1.3.4-65.el4 |
| Red Hat Enterprise Linux 4 | krb5-server | 0:1.3.4-65.el4 |
| Red Hat Enterprise Linux 4 | krb5-workstation | 0:1.3.4-65.el4 |
| Red Hat Enterprise Linux 5 | krb5 | 0:1.6.1-63.el5_7 |
| Red Hat Enterprise Linux 5 | krb5-debuginfo | 0:1.6.1-63.el5_7 |
| Red Hat Enterprise Linux 5 | krb5-devel | 0:1.6.1-63.el5_7 |
| Red Hat Enterprise Linux 5 | krb5-libs | 0:1.6.1-63.el5_7 |
| Red Hat Enterprise Linux 5 | krb5-server | 0:1.6.1-63.el5_7 |
| Red Hat Enterprise Linux 5 | krb5-server-ldap | 0:1.6.1-63.el5_7 |
| Red Hat Enterprise Linux 5 | krb5-workstation | 0:1.6.1-63.el5_7 |
| Red Hat Enterprise Linux 6 | krb5-appl | 0:1.0.1-7.el6_2 |
| Red Hat Enterprise Linux 6 | krb5-appl-clients | 0:1.0.1-7.el6_2 |
| Red Hat Enterprise Linux 6 | krb5-appl-debuginfo | 0:1.0.1-7.el6_2 |
| Red Hat Enterprise Linux 6 | krb5-appl-servers | 0:1.0.1-7.el6_2 |
| Red Hat rhel els 3 | krb5 | 0:1.2.7-73 |
| Red Hat rhel els 3 | krb5-debuginfo | 0:1.2.7-73 |
| Red Hat rhel els 3 | krb5-devel | 0:1.2.7-73 |
| Red Hat rhel els 3 | krb5-libs | 0:1.2.7-73 |
| Red Hat rhel els 3 | krb5-server | 0:1.2.7-73 |
| Red Hat rhel els 3 | krb5-workstation | 0:1.2.7-73 |
| Red Hat rhel eus 5.6 | krb5 | 0:1.6.1-55.el5_6.3 |
| Red Hat rhel eus 5.6 | krb5-debuginfo | 0:1.6.1-55.el5_6.3 |
| Red Hat rhel eus 5.6 | krb5-devel | 0:1.6.1-55.el5_6.3 |
| Red Hat rhel eus 5.6 | krb5-libs | 0:1.6.1-55.el5_6.3 |
| Red Hat rhel eus 5.6 | krb5-server | 0:1.6.1-55.el5_6.3 |
| Red Hat rhel eus 5.6 | krb5-server-ldap | 0:1.6.1-55.el5_6.3 |
| Red Hat rhel eus 5.6 | krb5-workstation | 0:1.6.1-55.el5_6.3 |
| Red Hat rhel eus 6.0 | krb5-appl | 0:1.0.1-1.el6_0.1 |
| Red Hat rhel eus 6.0 | krb5-appl-clients | 0:1.0.1-1.el6_0.1 |
| Red Hat rhel eus 6.0 | krb5-appl-debuginfo | 0:1.0.1-1.el6_0.1 |
| Red Hat rhel eus 6.0 | krb5-appl-servers | 0:1.0.1-1.el6_0.1 |
| Red Hat rhel eus 6.1 | krb5-appl | 0:1.0.1-2.el6_1.3 |
| Red Hat rhel eus 6.1 | krb5-appl-clients | 0:1.0.1-2.el6_1.3 |
| Red Hat rhel eus 6.1 | krb5-appl-debuginfo | 0:1.0.1-2.el6_1.3 |
| Red Hat rhel eus 6.1 | krb5-appl-servers | 0:1.0.1-2.el6_1.3 |
| Red Hat rhel mission critical 5.3 | krb5 | 0:1.6.1-31.el5_3.5 |
| Red Hat rhel mission critical 5.3 | krb5-debuginfo | 0:1.6.1-31.el5_3.5 |
| Red Hat rhel mission critical 5.3 | krb5-devel | 0:1.6.1-31.el5_3.5 |
| Red Hat rhel mission critical 5.3 | krb5-libs | 0:1.6.1-31.el5_3.5 |
| Red Hat rhel mission critical 5.3 | krb5-server | 0:1.6.1-31.el5_3.5 |
| Red Hat rhel mission critical 5.3 | krb5-workstation | 0:1.6.1-31.el5_3.5 |