PT-2005-5555 · Debian+1 · Telnetd-Ssl+1

Published 1970-01-01 · Updated 2017-10-11 · CVE-2005-0469

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Debian GNU/Linux telnet-ssl (affected versions not specified) Debian GNU/Linux telnetd-ssl (affected versions not specified)

Description The issue involves multiple vulnerabilities in the telnet-ssl and telnetd-ssl packages of Debian GNU/Linux, which can lead to breaches in confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. A specific vulnerability is a buffer overflow in the slc add reply function when handling LINEMODE suboptions, allowing remote attackers to execute arbitrary code via a reply with a large number of Set Local Character (SLC) commands.

Recommendations For Debian GNU/Linux telnet-ssl, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Debian GNU/Linux telnetd-ssl, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

AZL-37050

AZL-7382

BDU:2015-01306

BDU:2015-01307

CVE-2005-0469

DSA-697-1

DSA-699-1

DSA-703-1

DSA-731-1

DSA-765-1

RHSA-2005:327

RHSA-2005:330

RHSA-2005_327

RHSA-2005_330

Affected Products

Red Hat

Telnetd-Ssl

References · 32

• https://osv.dev/vulnerability/AZL-37050 · Vendor Advisory
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:01.telnet.asc · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-0469 · Vendor Advisory
• http://debian.org/security/2005/dsa-697 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-101665-1 · Vendor Advisory
• http://debian.org/security/2005/dsa-703 · Vendor Advisory
• http://debian.org/security/2005/dsa-699 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-01307 · Security Note
• https://osv.dev/vulnerability/AZL-7382 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-330.html · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-57761-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0469 · Security Note
• http://idefense.com/application/poi/display?id=220&type=vulnerabilities · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-327.html · Vendor Advisory
• http://debian.de/security/2005/dsa-731 · Vendor Advisory