Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

BSD Telnet client may let attackers run code

CVE-2005-0468 · published 21 years ago
Summary

Certain BSD‑based Telnet programs can be tricked into copying more data than they have space for when they process specially crafted responses. This memory overrun can let a remote attacker execute their own code on the affected system. Apply the latest security update for the Debian krb5 package or upgrade to a patched version of the Telnet client.

What to do
  • Update debian krb5 to version 1.3.6-2.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian krb5 < 1.3.6-2
Fix: upgrade to 1.3.6-2
Debian:13 debian krb5 < 1.3.6-2
Fix: upgrade to 1.3.6-2
Debian:14 debian krb5 < 1.3.6-2
Fix: upgrade to 1.3.6-2
– ncsa telnet c
cpe:2.3:a:ncsa:telnet:c:*:*:*:*:*:*:*
Original advisory text
Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet clients allows remote attackers to execute arbitrary code via responses that contain a large number o...
Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet clients allows remote attackers to execute arbitrary code via responses that contain a large number of characters that require escaping, which consumers more memory than allocated.
References
Severity
7.5 High
Exploitation
27% chance of attack within 30 days
Timeline
Published2 May 2005
Updated29 Sep 2026
First seen26 Sep 2026
Sources
DEBIAN-CVE-2005-0468 · OSV
CVE-2005-0468 · NVD
Track software like this
Free during beta