Multiple buffer overflows in the getterminaltype function in telnetd for Heimdal before 0.6.5 may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2005-0468 and CVE-2005-0469.

This advisory adds security support for the stable amd64 distribution.
It covers all security updates since the release of sarge, which were missing updated packages for the not yet official amd64 port. Future security advisories will include updates for this port as well.

A Project heimdal Security Advisory reports :

The telnet client program in Heimdal has buffer overflows in the functions slc_add_reply() and env_opt_add(), which may lead to remote code execution.

The telnetd server program in Heimdal has buffer overflows in the function getterminaltype, which may lead to remote code execution.

The rshd server in Heimdal has a privilege escalation bug when storing forwarded credentials. The code allowes a user to overwrite a file with its credential cache, and get ownership of the file.

A buffer overflow has been discovered in the telnet server from Heimdal, a free implementation of Kerberos 5, that could lead to the execution of arbitrary code.

The remote host is affected by the vulnerability described in GLSA-200506-24 (Heimdal: Buffer overflow vulnerabilities)

    It has been reported that the 'getterminaltype' function of     Heimdal's telnetd server is vulnerable to buffer overflows.
  Impact :

    An attacker could exploit this vulnerability to execute arbitrary     code with the permission of the telnetd server program.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
57528	Debian DSA-773-1 : amd64 - several vulnerabilities	Nessus	Debian Local Security Checks	critical
21499	FreeBSD : heimdal -- Multiple vulnerabilities (b62c80c2-b81a-11da-bec5-00123ffe8333)	Nessus	FreeBSD Local Security Checks	high
19220	Debian DSA-758-1 : heimdal - buffer overflow	Nessus	Debian Local Security Checks	medium
18590	GLSA-200506-24 : Heimdal: Buffer overflow vulnerabilities	Nessus	Gentoo Local Security Checks	medium

Detections

Analytics

CVE-2005-2040

critical

Tenable Plugins

critical

high

medium

medium