Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
197

Debian Stretch: DLA-2341-1 Critical: inetutils Remote Code Execution

In inetutils-telnetd, an implementation of a telnet daemon, arbitrary remote code execution might have been possible via short writes or urgent data. . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2341-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ August 24, 2020 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : inetutils Version : 2:1.9.4-2+deb9u1 CVE ID : CVE-2020-10188 Debian Bug : 956084 In inetutils-telnetd, an implementation of a telnet daemon, arbitrary remote code execution might have been possible via short writes or urgent data. For Debian 9 stretch, this problem has been fixed in version 2:1.9.4-2+deb9u1. We recommend that you upgrade your inetutils-telnetd packages. For the detailed security status of inetutils please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/inetutils Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Ubuntu LTS Issues Security Bulletin USN-4567-1 for net-tools, Resolving Serious Injection Vulnerability.. Debian Security Update, inetutils Remote Code, Telnet Daemon Fix. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Aug 24, 2020 Critical Debian LTS
91

Gentoo: 200410-03 High: NetKit-telnetd Buffer Overflow Threat

Buffer overflows exist in the telnet client and daemon provided by netkit-telnetd, which could possibly allow a remote attacker to gain root privileges and compromise the system. [More...]. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200410-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: NetKit-telnetd: buffer overflows in telnet and telnetd Date: October 05, 2004 Bugs: #64632 ID: 200410-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Buffer overflows exist in the telnet client and daemon provided by netkit-telnetd, which could possibly allow a remote attacker to gain root privileges and compromise the system. Background ========= NetKit-telnetd is a standard Linux telnet client and server from the NetKit utilities. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-misc/netkit-telnetd = 0.17-r4 Description ========== A possible buffer overflow exists in the parsing of option strings by the telnet daemon, where proper bounds checking is not applied when writing to a buffer. Additionaly, another possible buffer overflow has been found by Josh Martin in the handling of the environment variable HOME. Impact ===== A remote attacker sending a specially-crafted options string to the telnet daemon could be able to run arbitrary code with the privileges of the user running the telnet daemon, usually root. Furthermore, an attacker could make use of an overlong HOME variable to cause a buffer overflow in the telnet client, potentially leading to thelocal execution of arbitrary code. Workaround ========= There is no known workaround at this time. Resolution ========= All NetKit-telnetd users should upgrade to the latest version: # emerge sync # emerge -pv "> =net-misc/netkit-telnetd-0.17-r4" # emerge "> =net-misc/netkit-telnetd-0.17-r4" References ========= [ 1 ] CVE-2001-0554 [ 2 ] Debian Bug #264846 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200410-03 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to This email address is being protected from spambots. You need JavaScript enabled to view it. or alternatively, you may file a bug at https://bugs.gentoo.org/. License ====== Copyright 2004 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/1.0/ . Tackling serious exploitation risks in Gentoo's NetKit-telnetd, which might enable malicious actors to obtain root privileges.. Gentoo Linux, Buffer Overflow, Remote Access, NetKit, Telnet. . LinuxSecurity.com Team

Calendar 2 Oct 05, 2004 Gentoo
87

Debian Potato DSA-075-1 Critical: Netkit-Telnet-SSL Remote Exploit

The telnet daemon contained in the netkit-telnet-ssl_0.16.3-1 package in the 'stable' (potato) distribution of Debian GNU/Linux is vulnerable to an exploitable overflow in its output handling.. ------------------------------------------------------------------------ Debian Security Advisory DSA-075-1 This email address is being protected from spambots. You need JavaScript enabled to view it. Debian -- Security Information Robert van der Meulen August 14, 2001 ------------------------------------------------------------------------ Package : netkit-telnet-ssl Problem type : remote exploit Debian-specific: no The telnet daemon contained in the netkit-telnet-ssl_0.16.3-1 package in the 'stable' (potato) distribution of Debian GNU/Linux is vulnerable to an exploitable overflow in its output handling. The original bug was found by , and announced to bugtraq on Jul 18 2001. At that time, netkit-telnet versions after 0.14 were not believed to be vulnerable. On Aug 10 2001, zen-parse posted an advisory based on the same problem, for all netkit-telnet versions below 0.17. More details can be found on . As Debian uses the 'telnetd' user to run in.telnetd, this is not a remote root compromise on Debian systems; the 'telnetd' user can be compromised. We strongly advise you update your netkit-telnet-ssl packages to the versions listed below. wget url will fetch the file for you dpkg -i file.deb will install the referenced file. Debian GNU/Linux 2.2 alias potato --------------------------------- Potato was released for alpha, arm, i386, m68k, powerpc and sparc. Source archives: MD5 checksum: 953d3006b9491a441799f73633a72f05 MD5 checksum: aed9ded4b4d69dd852dfd5320a8a9cf5 MD5 checksum: 999a416e11e9a9750b0ec2428eeabe1d Alpha architecture: MD5 checksum: 92680b907a65008e04cc0cf16ce1d87f MD5 checksum: 4d4f6e8ee1e06eacb416de4733f45170 MD5 checksum: dec52e65bb6304fd353e2af33adedb7c ARM architecture: MD5 checksum:668f8343d7e6ed824a55d8510723cc2a MD5 checksum: c3bacf45513033a66bfefcf370e295c9 MD5 checksum: 3241dbd7380b97edec177305694891ae Intel IA-32 architecture: MD5 checksum: aec70bdc25994a1a885fac130a426ddc MD5 checksum: 4b97d30b1417a9e2ebb8d941c9486451 MD5 checksum: a6d456dc0a9789436dd4f92ace9dadf6 Motorola 680x0 architecture: MD5 checksum: a38f77d83afc1daeb9b23a91cdd90478 MD5 checksum: 0cb485fb260ac74b411b8b82bd299d04 MD5 checksum: 3c6cfd4542145edac7a9c4b55a59a896 PowerPC architecture: MD5 checksum: 983ec249db831da8f01e730f5265207e MD5 checksum: f069f9a731337b7bcc60db23ca2707ee MD5 checksum: 3627da7c28bb071a157f2cab29bd4ad9 Sun Sparc architecture: MD5 checksum: 7c108a2fd7d4a86513baa3849076882a MD5 checksum: 8951b3d32c086ba5fe81a3f62578dd89 MD5 checksum: 5ca8897ae2bb3afeb3a0c1b0f34677bc These packages will be moved into the stable distribution on its next revision. For not yet released architectures please refer to the appropriate directory . -- ---------------------------------------------------------------------------- apt-get: deb Debian -- Security Information stable/updates main dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Update the netkit-telnet-ssl package to mitigate a critical buffer overflow threat for Debian systems.. telnet, netkit-telnet-ssl, Debian Security, Remote Exploit. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Aug 14, 2001 Critical Debian
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here