| 0 |
| url |
VCID-4ke9-jwzb-q7hf |
| vulnerability_id |
VCID-4ke9-jwzb-q7hf |
| summary |
The ftp client in GNU Inetutils before 2.2 does not validate addresses returned by PASV/LSPV responses to make sure they match the server address. This is similar to CVE-2020-8284 for curl. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2021-40491
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-4ke9-jwzb-q7hf |
|
| 1 |
| url |
VCID-4u7r-qpkp-b3gd |
| vulnerability_id |
VCID-4u7r-qpkp-b3gd |
| summary |
GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of set*id() family functions in ftpd, rcp, rlogin, rsh, rshd, and uucpd. This is, for example, relevant if the setuid system call fails when a process is trying to drop privileges before letting an ordinary user control the activities of the process. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2023-40303
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-4u7r-qpkp-b3gd |
|
| 2 |
| url |
VCID-53pj-pwxv-qqhv |
| vulnerability_id |
VCID-53pj-pwxv-qqhv |
| summary |
Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
|
| fixed_packages |
|
| aliases |
CVE-2011-4862
|
| risk_score |
1.6 |
| exploitability |
2.0 |
| weighted_severity |
0.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-53pj-pwxv-qqhv |
|
| 3 |
| url |
VCID-6h3n-19b6-mqd4 |
| vulnerability_id |
VCID-6h3n-19b6-mqd4 |
| summary |
telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added to the login(1) implementation of util-linux in release 2.40. This is related to client control over the CREDENTIALS_DIRECTORY environment variable, and requires an unprivileged local user to create a login.noauth file. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-28372
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-6h3n-19b6-mqd4 |
|
| 4 |
|
| 5 |
| url |
VCID-f3v6-nfu3-4yes |
| vulnerability_id |
VCID-f3v6-nfu3-4yes |
| summary |
Buffer overflow in the TFTP client in InetUtils 1.4.2 allows remote malicious DNS servers to execute arbitrary code via a large DNS response that is handled by the gethostbyname function. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2004-1485
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-f3v6-nfu3-4yes |
|
| 6 |
| url |
VCID-g7dr-zw6q-4qbn |
| vulnerability_id |
VCID-g7dr-zw6q-4qbn |
| summary |
Unspecified vulnerability in ping.c in iputils 20020927, 20070202, 20071127, and 20100214 on Mandriva Linux allows remote attackers to cause a denial of service (hang) via a crafted echo response. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2010-2529
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-g7dr-zw6q-4qbn |
|
| 7 |
|
| 8 |
| url |
VCID-maan-8v51-n3fp |
| vulnerability_id |
VCID-maan-8v51-n3fp |
| summary |
telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is full. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-32746
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-maan-8v51-n3fp |
|
| 9 |
|
| 10 |
|
| 11 |
| url |
VCID-xzea-av55-ykfg |
| vulnerability_id |
VCID-xzea-av55-ykfg |
| summary |
telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference via 0xff 0xf7 or 0xff 0xf8. In a typical installation, the telnetd application would crash but the telnet service would remain available through inetd. However, if the telnetd application has many crashes within a short time interval, the telnet service would become unavailable after inetd logs a "telnet/tcp server failing (looping), service terminated" error. NOTE: MIT krb5-appl is not supported upstream but is shipped by a few Linux distributions. The affected code was removed from the supported MIT Kerberos 5 (aka krb5) product many years ago, at version 1.8. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2022-39028
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-xzea-av55-ykfg |
|
| 12 |
| url |
VCID-yk2c-4yjc-d3cw |
| vulnerability_id |
VCID-yk2c-4yjc-d3cw |
| summary |
rsyslog before 7.6.6 and 8.x before 8.4.1 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service (crash), possibly execute arbitrary code, or have other unspecified impact via a crafted priority (PRI) value that triggers an out-of-bounds array access. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2014-3634
|
| risk_score |
0.1 |
| exploitability |
0.5 |
| weighted_severity |
0.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-yk2c-4yjc-d3cw |
|