NVD

Id
66225  
Name
CVE-2005-0468  
Description
Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet clients allows remote attackers to execute arbitrary code via responses that contain a large number of characters that require escaping, which consumers more memory than allocated.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-05-02  
Modified Date
2010-08-21  
Seq
2005-0468  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
344825 66225 CVE-2005-0468 FreeBSD-SA-05:01.telnet  View
344826 66225 CVE-2005-0468 20050405-01-P  View
344827 66225 CVE-2005-0468 CLA-2005:962  View
344828 66225 CVE-2005-0468 oval:org.mitre.oval:def:9640  View
344829 66225 CVE-2005-0468 101665  View
344830 66225 CVE-2005-0468 101671  View
344831 66225 CVE-2005-0468 57755  View
344832 66225 CVE-2005-0468 57761  View
344833 66225 CVE-2005-0468 http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-001-telnet.txt  View
344834 66225 CVE-2005-0468 DSA-731  View
344835 66225 CVE-2005-0468 DSA-703  View
344836 66225 CVE-2005-0468 20050328 Multiple Telnet Client env_opt_add() Buffer Overflow Vulnerability  View
344837 66225 CVE-2005-0468 VU#341908  View
344838 66225 CVE-2005-0468 MDKSA-2005:061  View
344839 66225 CVE-2005-0468 RHSA-2005:327  View
344840 66225 CVE-2005-0468 RHSA-2005:330  View
344841 66225 CVE-2005-0468 12919  View
344842 66225 CVE-2005-0468 USN-224-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62000 JVNDB-2005-000202 Telnet クライアントの env_opt_add 関数における任意のコードを実行される脆弱性 多くの製品に同梱されている telnet クライアントには、env_opt_add() 関数で境界チェックが適切に行われないために、エスケープ文字などを含む特定の入力データを処理した場合にバッファオーバーフローが発生する脆弱性が存在します。 CVE-2005-0468 11672 CVE-2005-0468 66225 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000202.html 2005-03-28 2007-04-01 View