Release Date: | 2011-12-25 | |
Impact: | Critical | What is this? |
Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, and Heimdal 1.5.1 and earlier allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.
See more information about CVE-2011-4862 from MITRE CVE dictionary and NIST NVD
NOTE: The following CVSS metrics and score provided are preliminary and subject to review.
Base Score: | 10.0 |
Vector String: | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Version: | 2.0 |
Attack Vector: | Network |
Attack Complexity: | Low |
Authentication: | None |
Confidentiality Impact: | Complete |
Integrity Impact: | Complete |
Availability Impact: | Complete |
Platform | Errata | Release Date |
Oracle Enterprise Linux version 4 (krb5) | ELSA-2011-1851 | 2011-12-27 |
Oracle Linux version 5 (krb5) | ELSA-2011-1851 | 2011-12-27 |
Oracle Linux version 6 (krb5-appl) | ELSA-2011-1852 | 2011-12-27 |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections: