|Check Point Reference:||CPAI-2012-177|
|Date Published:||14 May 2012|
|Protection Provided by:||
|Who is Vulnerable?|| FreeBSD Project telnetd various |
OpenBSD Project telnetd various
Red Hat telnetd various
|Vulnerability Description||A buffer overflow vulnerability has been reported in telnetd, an implementation of the Telnet daemon.|
|Vulnerability Details||The vulnerability is due to lack of validation of key length while copying an encryption key into a fixed-length buffer. A remote attacker could exploit this vulnerability by sending a specially crafted packet to telnetd. Successful exploitation would allow attackers to execute arbitrary code in the security context of the affected service.|
This protection will detect and block attempts to exploit this vulnerability.
In order for the protection to be activated, update your product to the latest update. For information on how to update , go to SBP-2006-05, Protection tab and select the version of your choice.
SmartView Tracker will log the following entries:
Attack Name: Telnet Enforcement Violation
Attack Information: Multiple Vendors BSD telnetd Encryption Key Buffer Overflow