TELNET: Multiple Vendors BSD telnetd Encryption Key Buffer Overflow

This signature detects attempts to exploit a known flaw in BSD telnetd. The vulnerability is due to the copying of an encryption key into a fixed-length buffer without validation of the key's length. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted packet to telnetd. A successful exploitation attempt could result in the execution of arbitrary code in the security context of the Telnet daemon.

Extended Description

FreeBSD is prone to a remote buffer-overflow vulnerability. Exploiting this issue allows remote attackers to execute arbitrary code with superuser privileges. Successfully exploiting this issue will completely compromise affected computers.

Affected Products

Cisco ironport_email_security_appliance_c-series,Freebsd freebsd

References

BugTraq: 51182

CVE: CVE-2011-4862

URL: http://security.freebsd.org/advisories/FreeBSD-SA-11:08.telnetd.asc http://rhn.redhat.com/errata/RHSA-2011-1851.html http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2011-008.txt

Short Name

TELNET:OVERFLOW:BSD-ENCRY-KEYID

Severity

Major

Recommended

False

Recommended Action

Drop

TELNET: Multiple Vendors BSD telnetd Encryption Key Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?