CVE-2011-4862
EXPLOITED IN THE WILDGNU inetutils < 1.9 - Remote Code Execution via Long Encryption Key
Title source: llmExploitation Summary
CVE-2011-4862 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io).
EIP tracks 10 public exploits from researchers including Metasploit, NighterMan & BatchDrake, hdbreaker, including a Metasploit module auxiliary/scanner/telnet/telnet_encrypt_overflow.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in the encryption option handler of Linux BSD-derived telnet services (inetutils or krb5-telnet). It sends a maliciously crafted encryption key ID to achieve remote code execution.
Description
Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.
Exploits (10)
This Metasploit module exploits a buffer overflow in the encryption option handler of Linux BSD-derived telnet services (inetutils or krb5-telnet). It sends a maliciously crafted encryption key ID to achieve remote code execution.
This exploit targets a buffer overflow in the FreeBSD telnet service's encryption option handler (CVE-2011-4862). It sends a crafted payload to trigger the vulnerability, leading to remote code execution with elevated privileges.
This exploit targets a vulnerability in telnetd's encryption key ID handling (CVE-2011-4862) to achieve remote code execution. It uses a buffer overflow to overwrite a function pointer and trigger shellcode execution, supporting multiple targets including Linux, BSD, and SPARC systems.
This is a Go-based exploit for CVE-2011-4862, targeting a buffer overflow vulnerability in the telnet service. It includes shellcode execution for remote command execution (RCE) via a crafted payload.
This repository provides a technical analysis and patch for CVE-2011-4862, a buffer overflow vulnerability in FreeBSD's telnetd. The patch adds a length check to prevent overflow by setting len to 0 if it exceeds MAXKEYLEN.
This repository provides a patch for CVE-2011-4862, a buffer overflow vulnerability in FreeBSD's telnetd. The patch adds a length check to prevent overflow by setting len to 0 if it exceeds MAXKEYLEN.
This repository contains a writeup and a custom patch for CVE-2011-4862, a buffer overflow vulnerability in FreeBSD's telnetd. The author describes their approach to patching the vulnerability and provides instructions for applying the patch.
This Metasploit module scans for a buffer overflow vulnerability in BSD-derived telnetd services by sending malformed encryption key ID packets and checking for abnormal responses. It does not exploit the vulnerability but detects its presence.
This Metasploit module exploits a buffer overflow in the encryption option handler of Linux BSD-derived telnet services (inetutils or krb5-telnet). It sends a crafted payload to trigger the vulnerability, leading to remote code execution.
This Metasploit module exploits a buffer overflow in the FreeBSD telnet service's encryption option handler (CVE-2011-4862). It sends a crafted payload to trigger the vulnerability, leading to remote code execution with elevated privileges.