Novell Home

CVE-2011-4862

Common Vulnerabilities and Exposures

[Previous] [Index] [Next]

Upstream information

CVE-2011-4862 at MITRE

Description

Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.

NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

Novell Bugzilla entry: 738632

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Linux Enterprise Software Development Kit 11 SP1
  • krb5-devel >= 1.6.3-133.48.48.1
  • krb5-server >= 1.6.3-133.48.48.1
Builds
SAT Patch Nr: 5594
SUSE Linux Enterprise Software Development Kit 11 SP1
  • krb5-devel >= 1.6.3-133.48.48.1
Builds
SAT Patch Nr: 5594
SUSE Linux Enterprise Software Development Kit 11 SP1
  • krb5-devel >= 1.6.3-133.48.48.1
  • krb5-devel-32bit >= 1.6.3-133.48.48.1
Builds
SAT Patch Nr: 5594
SUSE Linux Enterprise Software Development Kit 11 SP1
  • krb5-devel >= 1.6.3-133.48.48.1
  • krb5-devel-32bit >= 1.6.3-133.48.48.1
  • krb5-server >= 1.6.3-133.48.48.1
Builds
SAT Patch Nr: 5594
SUSE Linux Enterprise Desktop 11 SP1
  • krb5 >= 1.6.3-133.48.48.1
  • krb5-client >= 1.6.3-133.48.48.1
Builds
SAT Patch Nr: 5594
SUSE Linux Enterprise Desktop 11 SP1
  • krb5 >= 1.6.3-133.48.48.1
  • krb5-32bit >= 1.6.3-133.48.48.1
  • krb5-client >= 1.6.3-133.48.48.1
Builds
SAT Patch Nr: 5594
SUSE Linux Enterprise Server 11 SP1
SUSE Linux Enterprise Server 11 SP1 for VMware
  • krb5 >= 1.6.3-133.48.48.1
  • krb5-32bit >= 1.6.3-133.48.48.1
  • krb5-apps-clients >= 1.6.3-133.48.48.1
  • krb5-apps-servers >= 1.6.3-133.48.48.1
  • krb5-client >= 1.6.3-133.48.48.1
  • krb5-server >= 1.6.3-133.48.48.1
Builds
SAT Patch Nr: 5594
SUSE Linux Enterprise Server 11 SP1
SUSE Linux Enterprise Server 11 SP1 for VMware
  • krb5 >= 1.6.3-133.48.48.1
  • krb5-apps-clients >= 1.6.3-133.48.48.1
  • krb5-apps-servers >= 1.6.3-133.48.48.1
  • krb5-client >= 1.6.3-133.48.48.1
  • krb5-server >= 1.6.3-133.48.48.1
Builds
SAT Patch Nr: 5594
SUSE Linux Enterprise Server 11 SP1
  • krb5 >= 1.6.3-133.48.48.1
  • krb5-apps-clients >= 1.6.3-133.48.48.1
  • krb5-apps-servers >= 1.6.3-133.48.48.1
  • krb5-client >= 1.6.3-133.48.48.1
  • krb5-server >= 1.6.3-133.48.48.1
  • krb5-x86 >= 1.6.3-133.48.48.1
Builds
SAT Patch Nr: 5594
SUSE Linux Enterprise Desktop 10 SP4 for x86
  • krb5 >= 1.4.3-19.49.49.1
  • krb5-client >= 1.4.3-19.49.49.1
  • krb5-devel >= 1.4.3-19.49.49.1
Builds
ZYPP Patch Nr: 7899
SUSE Linux Enterprise Desktop 10 SP4 for AMD64 and Intel EM64T
  • krb5 >= 1.4.3-19.49.49.1
  • krb5-32bit >= 1.4.3-19.49.49.1
  • krb5-client >= 1.4.3-19.49.49.1
  • krb5-devel >= 1.4.3-19.49.49.1
  • krb5-devel-32bit >= 1.4.3-19.49.49.1
Builds
ZYPP Patch Nr: 7899
SLE SDK 10 SP4 for IBM iSeries and IBM pSeries
SLE SDK 10 SP4 for IBM zSeries
SLE SDK 10 SP4 for IPF
SLE SDK 10 SP4 for X86-64
SLE SDK 10 SP4 for x86
  • krb5-apps-clients >= 1.4.3-19.49.49.1
  • krb5-apps-servers >= 1.4.3-19.49.49.1
  • krb5-server >= 1.4.3-19.49.49.1
Builds
ZYPP Patch Nr: 7899
SUSE Linux Enterprise Server 10 SP4 for x86
  • krb5 >= 1.4.3-19.49.49.1
  • krb5-apps-clients >= 1.4.3-19.49.49.1
  • krb5-apps-servers >= 1.4.3-19.49.49.1
  • krb5-client >= 1.4.3-19.49.49.1
  • krb5-devel >= 1.4.3-19.49.49.1
  • krb5-server >= 1.4.3-19.49.49.1
Builds
ZYPP Patch Nr: 7899
SUSE Linux Enterprise Server 10 SP4 for IPF
  • krb5 >= 1.4.3-19.49.49.1
  • krb5-apps-clients >= 1.4.3-19.49.49.1
  • krb5-apps-servers >= 1.4.3-19.49.49.1
  • krb5-client >= 1.4.3-19.49.49.1
  • krb5-devel >= 1.4.3-19.49.49.1
  • krb5-server >= 1.4.3-19.49.49.1
  • krb5-x86 >= 1.4.3-19.49.49.1
Builds
ZYPP Patch Nr: 7899
SUSE Linux Enterprise Server 10 SP4 for IBM POWER
  • krb5 >= 1.4.3-19.49.49.1
  • krb5-64bit >= 1.4.3-19.49.49.1
  • krb5-apps-clients >= 1.4.3-19.49.49.1
  • krb5-apps-servers >= 1.4.3-19.49.49.1
  • krb5-client >= 1.4.3-19.49.49.1
  • krb5-devel >= 1.4.3-19.49.49.1
  • krb5-devel-64bit >= 1.4.3-19.49.49.1
  • krb5-server >= 1.4.3-19.49.49.1
Builds
ZYPP Patch Nr: 7899
SUSE Linux Enterprise Server 10 SP4 for AMD64 and Intel EM64T
SUSE Linux Enterprise Server 10 SP4 for IBM zSeries 64bit
  • krb5 >= 1.4.3-19.49.49.1
  • krb5-32bit >= 1.4.3-19.49.49.1
  • krb5-apps-clients >= 1.4.3-19.49.49.1
  • krb5-apps-servers >= 1.4.3-19.49.49.1
  • krb5-client >= 1.4.3-19.49.49.1
  • krb5-devel >= 1.4.3-19.49.49.1
  • krb5-devel-32bit >= 1.4.3-19.49.49.1
  • krb5-server >= 1.4.3-19.49.49.1
Builds
ZYPP Patch Nr: 7899
openSUSE 11.3
  • krb5-appl-clients-debuginfo >= 1.0-4.5.1
  • krb5-appl-debugsource >= 1.0-4.5.1
  • krb5-appl-servers-debuginfo >= 1.0-4.5.1
openSUSE 11.3
  • krb5-appl-clients >= 1.0-4.5.1
  • krb5-appl-servers >= 1.0-4.5.1
openSUSE 11.4
  • krb5-appl-clients >= 1.0-7.12.1
  • krb5-appl-servers >= 1.0-7.12.1
SUSE CORE 9 for IBM S/390 31bit
SUSE CORE 9 for x86
  • heimdal >= 0.6.1rc3-55.29
  • heimdal-devel >= 0.6.1rc3-55.29
  • heimdal-lib >= 0.6.1rc3-55.29
  • heimdal-tools >= 0.6.1rc3-55.29
sles9-sp4-ltss.s390x
sles9-sp4-ltss.x86-64
sles9-sp4-ltss.x86
sles9-sp4-ltss.s390
YOU Patch Nr: 12853
SUSE CORE 9 for IBM zSeries 64bit
  • heimdal >= 0.6.1rc3-55.29
  • heimdal-devel >= 0.6.1rc3-55.29
  • heimdal-devel-32bit >= 9-201112301034
  • heimdal-lib >= 0.6.1rc3-55.29
  • heimdal-lib-32bit >= 9-201112301034
  • heimdal-tools >= 0.6.1rc3-55.29
sles9-sp4-ltss.s390x
sles9-sp4-ltss.x86-64
sles9-sp4-ltss.x86
sles9-sp4-ltss.s390
YOU Patch Nr: 12853
SUSE CORE 9 for AMD64 and Intel EM64T
  • heimdal >= 0.6.1rc3-55.29
  • heimdal-devel >= 0.6.1rc3-55.29
  • heimdal-devel-32bit >= 9-201112301024
  • heimdal-lib >= 0.6.1rc3-55.29
  • heimdal-lib-32bit >= 9-201112301024
  • heimdal-tools >= 0.6.1rc3-55.29
sles9-sp4-ltss.s390x
sles9-sp4-ltss.x86-64
sles9-sp4-ltss.x86
sles9-sp4-ltss.s390
YOU Patch Nr: 12853
SUSE Linux Enterprise Server 10 SP3 LTSS for x86
  • krb5 >= 1.4.3-19.49.49.1
  • krb5-apps-clients >= 1.4.3-19.49.49.1
  • krb5-apps-servers >= 1.4.3-19.49.49.1
  • krb5-client >= 1.4.3-19.49.49.1
  • krb5-devel >= 1.4.3-19.49.49.1
  • krb5-server >= 1.4.3-19.49.49.1
sles10-sp3-ltss.s390x
sles10-sp3-ltss.x86
sles10-sp3-ltss.x86-64
ZYPP Patch Nr: 7903
SUSE Linux Enterprise Server 10 SP3 LTSS for AMD64 and Intel EM64T
SUSE Linux Enterprise Server 10 SP3 LTSS for IBM zSeries 64bit
  • krb5 >= 1.4.3-19.49.49.1
  • krb5-32bit >= 1.4.3-19.49.49.1
  • krb5-apps-clients >= 1.4.3-19.49.49.1
  • krb5-apps-servers >= 1.4.3-19.49.49.1
  • krb5-client >= 1.4.3-19.49.49.1
  • krb5-devel >= 1.4.3-19.49.49.1
  • krb5-devel-32bit >= 1.4.3-19.49.49.1
  • krb5-server >= 1.4.3-19.49.49.1
sles10-sp3-ltss.s390x
sles10-sp3-ltss.x86
sles10-sp3-ltss.x86-64
ZYPP Patch Nr: 7903
SUSE Linux Enterprise Server 10 SP2 for x86
  • krb5 >= 1.4.3-19.43.37.1
  • krb5-apps-clients >= 1.4.3-19.43.37.1
  • krb5-apps-servers >= 1.4.3-19.43.37.1
  • krb5-client >= 1.4.3-19.43.37.1
  • krb5-devel >= 1.4.3-19.43.37.1
  • krb5-server >= 1.4.3-19.43.37.1
sles10-sp2-ltss.x86
sles10-sp2-ltss.s390x
sles10-sp2-debuginfo.s390x
sles10-sp2-debuginfo.x86-64
sles10-sp2-debuginfo.x86
sles10-sp2-ltss.x86-64
ZYPP Patch Nr: 7902
SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T
SUSE Linux Enterprise Server 10 SP2 for IBM zSeries 64bit
  • krb5 >= 1.4.3-19.43.37.1
  • krb5-32bit >= 1.4.3-19.43.37.1
  • krb5-apps-clients >= 1.4.3-19.43.37.1
  • krb5-apps-servers >= 1.4.3-19.43.37.1
  • krb5-client >= 1.4.3-19.43.37.1
  • krb5-devel >= 1.4.3-19.43.37.1
  • krb5-devel-32bit >= 1.4.3-19.43.37.1
  • krb5-server >= 1.4.3-19.43.37.1
sles10-sp2-ltss.x86
sles10-sp2-ltss.s390x
sles10-sp2-debuginfo.s390x
sles10-sp2-debuginfo.x86-64
sles10-sp2-debuginfo.x86
sles10-sp2-ltss.x86-64
ZYPP Patch Nr: 7902
SUSE CORE 9 for AMD64 and Intel EM64T
  • heimdal >= 0.6.1rc3-55.57
  • heimdal-devel >= 0.6.1rc3-55.57
  • heimdal-devel-32bit >= 9-201112301021
  • heimdal-lib >= 0.6.1rc3-55.57
  • heimdal-lib-32bit >= 9-201112301021
  • heimdal-tools >= 0.6.1rc3-55.57
Builds
YOU Patch Nr: 12852

© 2014 Novell