Total vulnerabilities in the database
Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.
| Software | From | Fixed in |
|---|---|---|
| mit / krb5-appl | - | 1.0.2.x |
| freebsd / freebsd | 7.3 | 9.0.x |
| heimdal_project / heimdal | - | 1.5.1.x |
| gnu / inetutils | - | 1.9 |
| fedoraproject / fedora | 16 | 16.x |
| fedoraproject / fedora | 15 | 15.x |
| debian / debian_linux | 5.0 | 5.0.x |
| debian / debian_linux | 7.0 | 7.0.x |
| debian / debian_linux | 6.0 | 6.0.x |
| suse / linux_enterprise_desktop | 11-sp1 | 11-sp1.x |
| suse / linux_enterprise_server | 9 | 9.x |
| opensuse / opensuse | 11.4 | 11.4.x |
| opensuse / opensuse | 11.3 | 11.3.x |
| suse / linux_enterprise_server | 10-sp2 | 10-sp2.x |
| suse / linux_enterprise_software_development_kit | 10-sp4 | 10-sp4.x |
| suse / linux_enterprise_server | 11-sp1 | 11-sp1.x |
| suse / linux_enterprise_server | 10-sp3 | 10-sp3.x |
| suse / linux_enterprise_desktop | 10-sp4 | 10-sp4.x |
| suse / linux_enterprise_server | 10-sp4 | 10-sp4.x |
| suse / linux_enterprise_software_development_kit | 11-sp1 | 11-sp1.x |