10

CVE-2011-4862: debian debian_linux Classic Buffer Overflow

CVSS: 10.0v2.0HighModified
AliasesRHSA-2011:1851RHSA-2011:1852RHSA-2011:1853
Published 25-12-2011Last modified 07-08-2024
Open JSON

Vulnerability summary

CVE-2011-4862 is a high (CVSS 10.0) Classic Buffer Overflow vulnerability in debian debian_linux. EPSS estimates a 95.06% chance of exploitation in the next 30 days, higher than 99.8% of scored vulnerabilities. 6 public exploits are recorded.

Overall risk
90/100
0100
Critical · default modelHow is this calculated?
CVSS score
10.0/10
010
High · v2.0 (NVD)
EPSS score
95.06%
0%100%
Critical · +0.08 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits6exploit-database, metasploit

Timeline

  1. 25-12-2011
    PublishedVulnerability first disclosed.
  2. 07-08-2024
    Last modifiedVulnerability information updated.

Description

Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

95.06%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

+0.08 pp

From 94.98% on 18-09-2026

18-09-202618-10-2026
EPSS score
95.06%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

6 found
  • exploit-databaseremotebsdVerified

    FreeBSD - Telnet Service Encryption Key ID Buffer Overflow (Metasploit)

    Maturity: weaponized

  • exploit-databaseremotelinuxVerified

    Linux BSD-derived Telnet Service Encryption Key ID - Remote Buffer Overflow (Metasploit)

    Maturity: weaponized

  • exploit-databaseremotelinuxVerified

    TelnetD encrypt_keyid - Function Pointer Overwrite

    Maturity: weaponized

Show all 6 exploits
  • MetasploitMetasploitremoteUnverified

    Telnet Service Encryption Key ID Overflow Detection

    auxiliary/scanner/telnet/telnet_encrypt_overflow

    Maturity: poc

  • MetasploitMetasploitremoteVerified

    FreeBSD Telnet Service Encryption Key ID Buffer Overflow

    exploit/freebsd/telnet/telnet_encrypt_keyid

    Maturity: weaponized

  • MetasploitMetasploitremoteVerified

    Linux BSD-derived Telnet Service Encryption Key ID Buffer Overflow

    exploit/linux/telnet/telnet_encrypt_keyid

    Maturity: weaponized

Weaknesses

CWE · root cause

Affected systems

Redhat11 products
  • krb5< 0:1.3.4-65.el4 | < 0:1.6.1-63.el5_7 | < 0:1.2.7-73 | < 0:1.6.1-31.el5_3.5 | < 0:1.6.1-55.el5_6.3
  • krb5-appl< 0:1.0.1-7.el6_2 | < 0:1.0.1-1.el6_0.1 | < 0:1.0.1-2.el6_1.3
  • krb5-appl-clients< 0:1.0.1-7.el6_2 | < 0:1.0.1-1.el6_0.1 | < 0:1.0.1-2.el6_1.3
  • krb5-appl-debuginfo< 0:1.0.1-7.el6_2 | < 0:1.0.1-1.el6_0.1 | < 0:1.0.1-2.el6_1.3
  • krb5-appl-servers< 0:1.0.1-7.el6_2 | < 0:1.0.1-1.el6_0.1 | < 0:1.0.1-2.el6_1.3
Debian5 products
  • heimdal< 1.5.dfsg.1-1 | < 1.4.0~git20100726.dfsg.1-2+squeeze1 | < 1.2.dfsg.1-2.1+lenny1
  • inetutils< 2:1.8-6 | < 2:1.6-3.1+squeeze1 | < 2:1.5.dfsg.1-9+lenny1
  • krb5< 1.8+dfsg~aa+r23527-1 | < 1.6.dfsg.4~beta1-5lenny7
  • krb5-appl< 1:1.0.1-1.2
  • debian_linuxEOL5.0 | 6.0 | 7.0
Suse3 products
Fedoraproject1 product
Freebsd1 product
Gnu1 product
Heimdal_project1 product
Mit1 product
Opensuse1 product

9 vendors · 25 products

References

57 links
Show all 57 references