Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

gnu inetutils vulnerabilities and exploits

(subscribe to this query)
1000
VMScore
CVE-2011-4862
Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 up to and including 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and previous versions, Heimdal 1.5.1 and previous versions, GNU inetutils, and possibly other products allows remote malicious users...
Gnu InetutilsHeimdal Project HeimdalMit Krb5-applFreebsd FreebsdFedoraproject Fedora 15Fedoraproject Fedora 16Debian Debian Linux 5.0Debian Debian Linux 6.0Debian Debian Linux 7.0Opensuse Opensuse 11.3Opensuse Opensuse 11.4Suse Linux Enterprise Desktop 10Suse Linux Enterprise Desktop 11Suse Linux Enterprise Server 9Suse Linux Enterprise Server 10Suse Linux Enterprise Server 11Suse Linux Enterprise Software Development Kit 10Suse Linux Enterprise Software Development Kit 11
383
VMScore
CVE-2021-40491
The ftp client in GNU Inetutils prior to 2.2 does not validate addresses returned by PASV/LSPV responses to make sure they match the server address. This is similar to CVE-2020-8284 for curl.
Gnu InetutilsDebian Debian Linux 10.0
NA
CVE-2023-40303
GNU inetutils prior to 2.5 may allow privilege escalation because of unchecked return values of set*id() family functions in ftpd, rcp, rlogin, rsh, rshd, and uucpd. This is, for example, relevant if the setuid system call fails when a process is trying to drop privileges before ...
Gnu Inetutils
NA
CVE-2022-39028
telnetd in GNU Inetutils up to and including 2.3, MIT krb5-appl up to and including 1.0.3, and derivative works has a NULL pointer dereference via 0xff 0xf7 or 0xff 0xf8. In a typical installation, the telnetd application would crash but the telnet service would remain available ...
Gnu InetutilsMit Kerberos 5Debian Debian Linux 10.0Netkit-telnet Project Netkit-telnet
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook