| Package | Affected versions | Patched versions |
|---|---|---|
| inetutils | < 1.9 | 1.9 |
| heimdal | ≤ 1.5.1 | |
| krb5-appl | ≤ 1.0.2 |
Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free