CVE-2021-40491

概要

参考情報

• bugs.debian.org/cgi-bin/bugreport.cgi · Third Party Advisory
• git.savannah.gnu.org/cgit/inetutils.git/commit · Patch
• lists.debian.org/debian-lts-announce/2022/11/msg00033.html · Mailing List
• lists.gnu.org/archive/html/bug-inetutils/2021-06/msg00002.html · Mailing List

inetutils のその他の脆弱性

• CVE-2026-32772中 4.7telnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from clients via NEW_ENVIRON SEND USERVAR.
• CVE-2026-32746緊急 9.8telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_…
• CVE-2026-28372高 7.8telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added …
• CVE-2026-24061緊急 9.8悪用確認済み（CISA KEV）telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.
• CVE-2023-40303高 7.8GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of set*id() family functions in ftpd, rcp, rlogin…