FreeBSD ‘telnetd’ 缓冲区错误漏洞

漏洞信息详情

FreeBSD ‘telnetd’ 缓冲区错误漏洞

• CNNVD编号：CNNVD-201112-439
• 危害等级： 超危
  
  
• CVE编号：
  CVE-2011-4862
  
• 漏洞类型：
  
  
  缓冲区错误
  
• 发布时间：
  
  2011-12-26
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2021-02-04
  
• 厂        商：
  
  mit
• 漏洞来源：

FreeBSD是由Core Team团队负责的FreeBSD项目中的一套类Unix自由操作系统，是经过BSD、386BSD和4.4BSD发展而来的类Unix的一个重要分支。

FreeBSD 7.3至9.0版本, MIT Kerberos Version 5 Applications 1.0.2及之前版本和Heimdal 1.5.1及之前版本中的telnetd中的libtelnet/encrypt.c中存在缓冲区溢出漏洞。远程攻击者可借助超长encryption键执行任意代码。

目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接：

http://www.freebsd.org/releases/7.3R/announce.html

来源:SECUNIA

链接:http://secunia.com/advisories/47359

来源:MLIST

链接:http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006118.html

来源:SECUNIA

链接:http://secunia.com/advisories/47357

来源:XF

链接:https://exchange.xforce.ibmcloud.com/vulnerabilities/71970

来源:FREEBSD

链接:http://security.freebsd.org/advisories/FreeBSD-SA-11:08.telnetd.asc

来源:SUSE

链接:http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00011.html

来源:REDHAT

链接:http://www.redhat.com/support/errata/RHSA-2011-1852.html

来源:SUSE

链接:http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00014.html

来源:BUGTRAQ

链接:http://archives.neohapsis.com/archives/bugtraq/2011-12/0172.html

来源:REDHAT

链接:http://www.redhat.com/support/errata/RHSA-2011-1853.html

来源:CONFIRM

链接:http://git.savannah.gnu.org/cgit/inetutils.git/commit/?id=665f1e73cdd9b38e2d2e11b8db9958a315935592

来源:EXPLOIT-DB

链接:http://www.exploit-db.com/exploits/18280/

来源:SUSE

链接:http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00007.html

来源:MLIST

链接:http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006120.html

来源:SECUNIA

链接:http://secunia.com/advisories/47341

来源:SECUNIA

链接:http://secunia.com/advisories/47441

来源:SUSE

链接:http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00015.html

来源:SECUNIA

链接:http://secunia.com/advisories/47348

来源:CONFIRM

链接:http://security.freebsd.org/patches/SA-11:08/telnetd.patch

来源:REDHAT

链接:http://www.redhat.com/support/errata/RHSA-2011-1851.html

来源:SECTRACK

链接:http://www.securitytracker.com/id?1026463

来源:SUSE

链接:http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00004.html

来源:MLIST

链接:http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006119.html

来源:SECUNIA

链接:http://secunia.com/advisories/46239

来源:MANDRIVA

链接:http://www.mandriva.com/security/advisories?name=MDVSA-2011:195

来源:SECTRACK

链接:http://www.securitytracker.com/id?1026460

来源:DEBIAN

链接:https://www.debian.org/security/2011/dsa-2373

来源:DEBIAN

链接:https://www.debian.org/security/2011/dsa-2372

来源:FEDORA

链接:http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071640.html

来源:OSVDB

链接:http://osvdb.org/78020

来源:SECUNIA

链接:http://secunia.com/advisories/47373

来源:FEDORA

链接:http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071627.html

来源:SUSE

链接:http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00005.html

来源:REDHAT

链接:http://www.redhat.com/support/errata/RHSA-2011-1854.html

来源:SECUNIA

链接:http://secunia.com/advisories/47399

来源:SUSE

链接:http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00010.html

来源:SECUNIA

链接:http://secunia.com/advisories/47374

来源:DEBIAN

链接:https://www.debian.org/security/2011/dsa-2375

来源:MLIST

链接:http://lists.freebsd.org/pipermail/freebsd-security/2011-December/006117.html

来源:SUSE

链接:http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00002.html

来源:SECUNIA

链接:http://secunia.com/advisories/47397

来源:CONFIRM

链接:http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2011-008.txt