CVE-2011-4862

緊急 10.0CVE-2011-4862 · 25/12/2011 公開 · 16/06/2026 更新

パッケージ	影響を受けるバージョン	修正済みバージョン
inetutils gnu	`< 1.9`	`1.9`
heimdal heimdal_project	`≤ 1.5.1`	修正版なし
krb5-appl mit	`≤ 1.0.2`	修正版なし

概要

Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.

参考情報

archives.neohapsis.com/archives/bugtraq/2011-12/0172.html · Broken Link
git.savannah.gnu.org/cgit/inetutils.git/commit · Patch
lists.fedoraproject.org/pipermail/package-announce/2012-January/071627.html · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2012-January/071640.html · Third Party Advisory
lists.freebsd.org/pipermail/freebsd-security/2011-December/006117.html · Vendor Advisory
lists.freebsd.org/pipermail/freebsd-security/2011-December/006118.html · Vendor Advisory
lists.freebsd.org/pipermail/freebsd-security/2011-December/006119.html · Vendor Advisory
lists.freebsd.org/pipermail/freebsd-security/2011-December/006120.html · Vendor Advisory
lists.opensuse.org/opensuse-security-announce/2012-01/msg00002.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2012-01/msg00004.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2012-01/msg00005.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2012-01/msg00007.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2012-01/msg00010.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2012-01/msg00011.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2012-01/msg00014.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2012-01/msg00015.html · Mailing List
osvdb.org/78020 · Broken Link
secunia.com/advisories/46239 · Third Party Advisory
secunia.com/advisories/47341 · Third Party Advisory
secunia.com/advisories/47348 · Third Party Advisory
secunia.com/advisories/47357 · Third Party Advisory
secunia.com/advisories/47359 · Third Party Advisory
secunia.com/advisories/47373 · Third Party Advisory
secunia.com/advisories/47374 · Third Party Advisory
secunia.com/advisories/47397 · Third Party Advisory
secunia.com/advisories/47399 · Third Party Advisory
secunia.com/advisories/47441 · Third Party Advisory
security.freebsd.org/advisories/FreeBSD-SA-11:08.telnetd.asc · Mitigation
security.freebsd.org/patches/SA-11:08/telnetd.patch · Patch
web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2011-008.txt · Patch
debian.org/security/2011/dsa-2372 · Third Party Advisory
debian.org/security/2011/dsa-2373 · Third Party Advisory
debian.org/security/2011/dsa-2375 · Third Party Advisory
exploit-db.com/exploits/18280 · Exploit
mandriva.com/security/advisories · Third Party Advisory
redhat.com/support/errata/RHSA-2011-1851.html · Third Party Advisory
redhat.com/support/errata/RHSA-2011-1852.html · Third Party Advisory
redhat.com/support/errata/RHSA-2011-1853.html · Third Party Advisory
redhat.com/support/errata/RHSA-2011-1854.html · Third Party Advisory
securitytracker.com/id · Third Party Advisory
securitytracker.com/id · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/71970 · Third Party Advisory

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン