Read the docs
TI-2011-04182 Aliases CVE-2011-4862GHSA-x8cr-m6vm-pqh4

Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT…

Priority CRITICAL 87CWE-120Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-120 and the CVSS impact.

Summary

Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.

Why it matters now

EPSS 0.95061 99th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA and NVD
Fix Fixed Red Hat: 4 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 21

CPEVersionsRoleVendor
cpe:2.3:a:gnu:inetutils:*:*:*:*:*:*:*:*before 1.9VulnerableGNU
cpe:2.3:a:heimdal_project:heimdal:*:*:*:*:*:*:*:*up to 1.5.1VulnerableHeimdal Project
cpe:2.3:a:mit:krb5-appl:*:*:*:*:*:*:*:*up to 1.0.2Vulnerablemoos-ivp
cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*7.3 – 9.0VulnerableFreeBSD
cpe:2.3:o:fedoraproject:fedora:15:*:*:*:*:*:*:*15VulnerableFedoraproject
cpe:2.3:o:fedoraproject:fedora:16:*:*:*:*:*:*:*16VulnerableFedoraproject
cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*5.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*6.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*7.0VulnerableDebian
cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*11.3VulnerableopenSUSE
  • cpe:2.3:a:gnu:inetutils:*:*:*:*:*:*:*:* Versions before 1.9 Vulnerable ·GNU
  • cpe:2.3:a:heimdal_project:heimdal:*:*:*:*:*:*:*:* Versions up to 1.5.1 Vulnerable ·Heimdal Project
  • cpe:2.3:a:mit:krb5-appl:*:*:*:*:*:*:*:* Versions up to 1.0.2 Vulnerable ·moos-ivp
  • cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:* Versions 7.3 – 9.0 Vulnerable ·FreeBSD
  • cpe:2.3:o:fedoraproject:fedora:15:*:*:*:*:*:*:* Versions 15 Vulnerable ·Fedoraproject
  • cpe:2.3:o:fedoraproject:fedora:16:*:*:*:*:*:*:* Versions 16 Vulnerable ·Fedoraproject
  • cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Debian
  • cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:* Versions 11.3 Vulnerable ·openSUSE
Show 11 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*11.4VulnerableopenSUSE
cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:*:*:-:*:*:*10 sp4VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_desktop:11:sp1:*:*:*:*:*:*11 sp1VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*9VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*10 sp2VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:ltss:*:*:*10 sp3VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:-:*:*:*10 sp4VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:-:*:*11 sp1VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:-:vmware:*:*11 sp1VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp4:*:*:*:*:*:*10 sp4VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp1:*:*:*:*:*:*11 sp1VulnerableSUSE
  • cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:* Versions 11.4 Vulnerable ·openSUSE
  • cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:*:*:-:*:*:* Versions 10 sp4 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_desktop:11:sp1:*:*:*:*:*:* Versions 11 sp1 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:* Versions 9 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:* Versions 10 sp2 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:ltss:*:*:* Versions 10 sp3 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:-:*:*:* Versions 10 sp4 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:-:*:* Versions 11 sp1 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:-:vmware:*:* Versions 11 sp1 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp4:*:*:*:*:*:* Versions 10 sp4 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp1:*:*:*:*:*:* Versions 11 sp1 Vulnerable ·SUSE

Remediation

Red Hat 4 advisories

  • RHSA-2011:1853 Released 2011-12-28 · Red Hat rating Critical
    krb5 security update
    • Red Hat Enterprise Linux AS (v. 3 ELS) krb5-1.2.7-73, krb5-devel-1.2.7-73.i386, krb5-libs-1.2.7-73.i386 +2
    • Red Hat Enterprise Linux ES (v. 3 ELS) krb5-1.2.7-73, krb5-devel-1.2.7-73.i386, krb5-libs-1.2.7-73.i386 +2
    • Red Hat Enterprise Linux EUS (v. 5.6 server) krb5-1.6.1-55.el5_6.3, krb5-devel-1.6.1-55.el5_6.3, krb5-devel-1.6.1-55.el5_6.3.i386 +18
    • Red Hat Enterprise Linux Long Life (v. 5.3 server) krb5-1.6.1-31.el5_3.5, krb5-devel-1.6.1-31.el5_3.5, krb5-devel-1.6.1-31.el5_3.5.i386 +10
  • RHSA-2011:1854 Released 2011-12-28 · Red Hat rating Critical
    krb5-appl security update
    • Red Hat Enterprise Linux Server EUS (v. 6.0) krb5-appl-1.0.1-1.el6_0.1, krb5-appl-clients-1.0.1-1.el6_0.1, krb5-appl-servers-1.0.1-1.el6_0.1
    • Red Hat Enterprise Linux Server EUS (v. 6.1) krb5-appl-1.0.1-2.el6_1.3, krb5-appl-clients-1.0.1-2.el6_1.3, krb5-appl-servers-1.0.1-2.el6_1.3
  • RHSA-2011:1852 Released 2011-12-27 · Red Hat rating Critical
    krb5-appl security update
    • Red Hat Enterprise Linux Desktop (v. 6) krb5-appl-1.0.1-7.el6_2, krb5-appl-clients-1.0.1-7.el6_2, krb5-appl-servers-1.0.1-7.el6_2
    • Red Hat Enterprise Linux HPC Node (v. 6) krb5-appl-1.0.1-7.el6_2, krb5-appl-clients-1.0.1-7.el6_2, krb5-appl-servers-1.0.1-7.el6_2
    • Red Hat Enterprise Linux Server (v. 6) krb5-appl-1.0.1-7.el6_2, krb5-appl-clients-1.0.1-7.el6_2, krb5-appl-servers-1.0.1-7.el6_2
    • Red Hat Enterprise Linux Workstation (v. 6) krb5-appl-1.0.1-7.el6_2, krb5-appl-clients-1.0.1-7.el6_2, krb5-appl-servers-1.0.1-7.el6_2
Show 1 more Red Hat advisories
  • RHSA-2011:1851 Released 2011-12-27 · Red Hat rating Critical
    krb5 security update
    • RHEL Desktop Workstation (v. 5 client) krb5-1.6.1-63.el5_7, krb5-devel-1.6.1-63.el5_7, krb5-devel-1.6.1-63.el5_7.i386 +4
    • Red Hat Enterprise Linux (v. 5 server) krb5-1.6.1-63.el5_7, krb5-devel-1.6.1-63.el5_7, krb5-devel-1.6.1-63.el5_7.i386 +18
    • Red Hat Enterprise Linux AS version 4 krb5-1.3.4-65.el4, krb5-devel-1.3.4-65.el4, krb5-devel-1.3.4-65.el4.i386 +14
    • Red Hat Enterprise Linux Desktop (v. 5 client) krb5-1.6.1-63.el5_7, krb5-libs-1.6.1-63.el5_7, krb5-libs-1.6.1-63.el5_7.i386 +2
    • Red Hat Enterprise Linux Desktop version 4 krb5-1.3.4-65.el4, krb5-devel-1.3.4-65.el4, krb5-devel-1.3.4-65.el4.i386 +6
    • Red Hat Enterprise Linux ES version 4 krb5-1.3.4-65.el4, krb5-devel-1.3.4-65.el4, krb5-devel-1.3.4-65.el4.i386 +10
    • Red Hat Enterprise Linux WS version 4 krb5-1.3.4-65.el4, krb5-devel-1.3.4-65.el4, krb5-devel-1.3.4-65.el4.i386 +10

Vendor assessments

Red Hat

Red Hat rating: Critical. Red Hat's page for this CVE →

ProductStatusPlan or fix
RHEL Desktop Workstation (v. 5 client)Fixed RHSA-2011:1851
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2011:1851
Red Hat Enterprise Linux AS (v. 3 ELS)Fixed RHSA-2011:1853
Red Hat Enterprise Linux AS version 4Fixed RHSA-2011:1851
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2011:1851
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2011:1852
Red Hat Enterprise Linux Desktop version 4Fixed RHSA-2011:1851
Red Hat Enterprise Linux ES (v. 3 ELS)Fixed RHSA-2011:1853
Red Hat Enterprise Linux ES version 4Fixed RHSA-2011:1851
Red Hat Enterprise Linux EUS (v. 5.6 server)Fixed RHSA-2011:1853
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2011:1852
Red Hat Enterprise Linux Long Life (v. 5.3 server)Fixed RHSA-2011:1853
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2011:1852
Red Hat Enterprise Linux Server EUS (v. 6.0)Fixed RHSA-2011:1854
Red Hat Enterprise Linux Server EUS (v. 6.1)Fixed RHSA-2011:1854
Red Hat Enterprise Linux WS version 4Fixed RHSA-2011:1851
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2011:1852

Timeline

  1. 2026-10-02 Threatist record created from CVE-2011-4862
  2. 2026-10-03 Alias added: GHSA-x8cr-m6vm-pqh4

References

Exploit 1

Patch 3

Advisory 23

Other 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences