Summary
The remote host is missing an update to inetutils
announced via advisory DSA 2373-1.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%202373-1
Insight
It was discovered that the Kerberos support for telnetd contains a pre-authentication buffer overflow, which may enable remote attackers who can connect to the Telnet to execute arbitrary code with root privileges.
For the oldstable distribution (lenny), this problem has been fixed in version 2:1.5.dfsg.1-9+lenny1.
For the stable distribution (squeeze), this problem has been fixed in version 2:1.6-3.1+squeeze1.
For the testing distribution (wheezy) and the unstable distribution (sid), this problem will be fixed soon.
We recommend that you upgrade your inetutils packages.
Severity
Classification
-
CVE CVE-2011-4862 -
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities