tech-security archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Heimdal telnetd advisory

To: tech-security%netbsd.org@localhost
Subject: Heimdal telnetd advisory
From: Ed Ravin <eravin%panix.com@localhost>
Date: Tue, 27 Dec 2011 19:46:55 -0500

FreeBSD has announced a telnetd unauthenticated remote root exploit:

  http://lists.freebsd.org/pipermail/freebsd-announce/2011-December/001398.html

Which also affects Heimdal and MIT Kerberos:

  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-4862

I presume NetBSD telnetd is also vulnerable as it uses the same codebase.

        -- Ed

Follow-Ups:
- Re: Heimdal telnetd advisory
  - From: Hubert Feyrer
- Re: Heimdal telnetd advisory
  - From: Christos Zoulas

Prev by Date: Updated: NetBSD Security Advisory 2011-008: OpenPAM privilege escalation
Next by Date: Re: Heimdal telnetd advisory
Previous by Thread: Updated: NetBSD Security Advisory 2011-008: OpenPAM privilege escalation
Next by Thread: Re: Heimdal telnetd advisory
Indexes:

Home | Main Index | Thread Index | Old Index