peter bassill · operator
$ cve CVE-2011-4862 JSON

CVE-2011-4862 EXPLOIT

10.0
HIGH · CVSS 2.0 · EPSS 95% (pctl 100)

Patch early

A public exploit exists.

Description

Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.

Scoring

CVSS10.0 (HIGH, v2.0)
VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS94.98% — more likely to be exploited than 100% of all CVEs
WeaknessCWE-120
On CISA KEVno
Public exploityes
Published2011-12-25
Last modified2026-06-16

Affected (10)

VendorProduct
debiandebian linux
fedoraprojectfedora
freebsdfreebsd
gnuinetutils
heimdal projectheimdal
mitkrb5-appl
opensuseopensuse
suselinux enterprise desktop
suselinux enterprise server
suselinux enterprise software development kit

Public exploits

SourceTitleDate
exploit-dbLinux BSD-derived Telnet Service Encryption Key ID - Remote Buffer Overflow (Metasploit)2012-01-14
exploit-dbFreeBSD - Telnet Service Encryption Key ID Buffer Overflow (Metasploit)2012-01-14
exploit-dbTelnetD encrypt_keyid - Function Pointer Overwrite2011-12-26

References

→ the Explorer  ·  watch your stack  ·  NVD