Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -3 articles for you...
203
security advisorybuffer overflowsoftware updateMageia 9 krb5-appl Important Buffer Overflow Vulnerability MGASA-2026-0122
MGASA-2026-0122 - Updated krb5-appl packages fix security vulnerability. MGASA-2026-0122 - Updated krb5-appl packages fix security vulnerability Publication date: 07 May 2026 URL: https://advisories.mageia.org/MGASA-2026-0122.html Type: security Affected Mageia releases: 9 CVE: CVE-2026-32746 Description: telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_slc does not check whether the buffer is full. (CVE-2026-32746) References: - https://bugs.mageia.org/show_bug.cgi?id=35468 - https://lists.opensuse.org/archives/list/
May 07, 2026
•Important
Mageia
91
security advisoryGentooremote code executionGentoo inetutils High Remote Code Exec CVE-2026-24061 GLSA 202601-01
A vulnerability has been discovered in the telnetd module of inetutils, which allows remote code execution as root.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202601-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: inetutils: Remote Code Execution Date: January 26, 2026 Bugs: #969065 ID: 202601-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== A vulnerability has been discovered in the telnetd module of inetutils, which allows remote code execution as root. Background ========== Inetutils is a collection of common network programs including a telnet client and server. Affected packages ================= Package Vulnerable Unaffected ------------------ ------------ ------------ net-misc/inetutils < 2.7 > = 2.7 Description =========== The telnetd server invokes /usr/bin/login (normally running as root) passing the value of the USER environment variable received from the client as the last parameter. If the client supply a carefully crafted USER environment value being the string "-f root", and passes the telnet(1) -a or --login parameter to send this USER environment to the server, the client will be automatically logged in as root bypassing normal authentication processes. This happens because the telnetd server do not sanitize the USER environment variable before passing it on to login(1), and login(1) uses the -f parameter to by-pass normal authentication. Impact ====== An attacker can login as root via the telnetd daemon. Workaround ========== Reinstall inetutils with the telnetd USE flag disabled. This is the default in Gentoo. Resolution ========== All inetutils users with the telnetd USE flag enabled should upgradeto the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =net-misc/inetutils-2.7" References ========== [ 1 ] CVE-2026-24061 https://nvd.nist.gov/vuln/detail/CVE-2026-24061 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202601-01 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Jan 26, 2026
•Critical
Gentoo
87
security advisorybuffer overflowdebianDebian: DSA-2375-1 Critical: Krb5 Telnetd Buffer Overflow
It was discovered that the encryption support for BSD telnetd contains a pre-authentication buffer overflow, which may enable remote attackers who can connect to the Telnet port to execute arbitrary code with root privileges. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2375-1
Dec 26, 2011
•Critical
Debian
100
security advisoryremote code executiontelnetdSUSE: 2005:040 Critical: heimdal telnetd Remote Code Execution
A remote buffer overflow has been fixed in the heimdal / kerberos A remote buffer overflow has been fixed in the heimdal / kerberos telnetd daemon which could lead to a remote user executing code as telnetd daemon which could lead to a remote user executing code as root by overflowing a buffer. This attack requires the use of the kerberized telnetd of the heimdal suite, which is not used by defau [More...]. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ______________________________________________________________________________ SUSE Security Announcement Package: heimdal Announcement ID: SUSE-SA:2005:040 Date: Wed, 06 Jul 2005 14:00:00 +0000 Affected Products: 8.2, 9.0, 9.1, 9.2 SUSE Linux Desktop 1.0 SUSE Linux Enterprise Server 8, 9 Novell Linux Desktop 9 Vulnerability Type: remote code execution Severity (1-10): 9 SUSE Default Package: yes Cross-References: CAN-2005-2040 Content of This Advisory: 1) Security Vulnerability Resolved: heimdal telnetd remote buffer overflow Problem Description 2) Solution or Work-Around 3) Special Instructions and Notes 4) Package Location and Checksums 5) Pending Vulnerabilities, Solutions, and Work-Arounds: See SUSE Security Summary Report. 6) Authenticity Verification and Additional Information ______________________________________________________________________________ 1) Problem Description and Brief Discussion A remote buffer overflow has been fixed in the heimdal / kerberos telnetd daemon which could lead to a remote user executing code as root by overflowing a buffer. This attack requires the use of the kerberized telnetd of the heimdal suite, which is not used by default on SUSE systems. This is tracked bythe Mitre CVE ID CAN-2005-2040. 2) Solution or Work-Around Please install the updated packages. 3) Special Instructions and Notes Since the heimdal telnetd is usually started from inetd/xinetd, no action is necessary. 4) Package Location and Checksums The preferred method for installing security updates is to use the YaST Online Update (YOU) tool. YOU detects which updates are required and automatically performs the necessary steps to verify and install them. Alternatively, download the update packages for your distribution manually and verify their integrity by the methods listed in Section 6 of this announcement. Then install the packages using the command rpm -Fhv to apply the update, replacing with the filename of the downloaded RPM package. Our maintenance customers are notified individually. The packages are offered for installation from the maintenance web. x86 Platform: SUSE Linux 9.2: 3c58f2d19431fec5e398dac27df1f4d4 SUSE Linux 9.1: d96212ff5cfae6790f33fd5fd2fbaf0e source rpm(s): e5b9e2eede280ee45908e7760119c00a SUSE Linux 9.0: 810f6b76593cb4188a6f05da62edb983 source rpm(s): 05f4ce0b1bf5a8a277d72206723f5e66 SUSE Linux 8.2: 8d49e11b757755d4b59c0a2ec922ebb4 source rpm(s): 35ed1cbb68084f390d58009382c88712 x86-64 Platform: SUSE Linux 9.2: 26fd8fbf592fc8b3f92afff2c2443a1f source rpm(s): 34aed06065553bd7b2c20c24c7bbe66b SUSE Linux 9.1: 628db7ea5c88db6ee84b7d90794e92a3 source rpm(s): 8c0bd4f6ccee1a87725262d37894b2a2 SUSE Linux 9.0: 0fc2978b91c3eee2397fc6c3ae811849 source rpm(s): ad57d43e4b8d02705fd1e1861bfa56ab ______________________________________________________________________________ 5) Pending Vulnerabilities, Solutions, and Work-Arounds: See SUSE Security SummaryReport. ______________________________________________________________________________ 6) Authenticity Verification and Additional Information - Announcement authenticity verification: SUSE security announcements are published via mailing lists and on Web sites. The authenticity and integrity of a SUSE security announcement is guaranteed by a cryptographic signature in each announcement. All SUSE security announcements are published with a valid signature. To verify the signature of the announcement, save it as text into a file and run the command gpg --verify replacing with the name of the file where you saved the announcement. The output for a valid signature looks like: gpg: Signature made using RSA key ID 3D25D3D9 gpg: Good signature from "SuSE Security Team " where is replaced by the date the document was signed. If the security team's key is not contained in your key ring, you can import it from the first installation CD. To import the key, use the command gpg --import gpg-pubkey-3d25d3d9-36e12d04.asc - Package authenticity verification: SUSE update packages are available on many mirror FTP servers all over the world. While this service is considered valuable and important to the free and open source software community, the authenticity and the integrity of a package needs to be verified to ensure that it has not been tampered with. There are two verification methods that can be used independently from each other to prove the authenticity of a downloaded file or RPM package: 1) Using the internal gpg signatures of the rpm package 2) MD5 checksums as provided in this announcement 1) The internal rpm package signatures provide an easy way to verify the authenticity of an RPM package. Use the command rpm -v --checksig to verify the signature of the package, replacing with the filename of the RPM package downloaded. The package isunmodified if it contains a valid signature from
Jul 06, 2005
•Critical
SuSE
100
security advisorybuffer overflowcriticalSuSE: 2001:029 Critical: Remote Code Execution in Telnetd
The telnet server which is shipped with SuSE distributions contains a remotely exploitable buffer-overflow within its telnet option negotiation code.. ______________________________________________________________________________ SuSE Security Announcement Package: nkitb/nkitserv/telnetd Announcement-ID: SuSE-SA:2001:029 Date: Mon Sep 3 12:55:58 MEST 2001 Affected SuSE versions: [6.1, 6.2,] 6.3, 6.4, 7.0, 7.1, 7.2 Vulnerability Type: remote code execution Severity (1-10): 8 SuSE default package: yes Other affected systems: All UN*X Systems shipping BSD derived telnetd Content of this advisory: 1) security vulnerability resolved: Buffer overflow in in.telnetd problem description, discussion, solution and upgrade information 2) pending vulnerabilities, solutions, workarounds 3) standard appendix (further information) ______________________________________________________________________________ 1) problem description, brief discussion, solution, upgrade information The telnet server which is shipped with SuSE distributions contains a remotely exploitable buffer-overflow within its telnet option negotiation code. This bug is wide-spread on UN*X systems and affects almost all implementations of telnet daemons available. SuSE 7.2 distribution ships the telnet-server package which contains the vulnerable telnet daemon. This package has been fixed. The SuSE Linux distributions 6.3 and 6.4 contain versions and implementations of the telnet-daemon that are vulnerable, but the complexity of the code requires a full source code audit of the software. In order not to further delay the release of the packages for the SuSE Linux 7.x distributions, we recommend to disable the telnet daemon on the 6.x distributions. This can be done by commenting out the line in/etc/inetd.conf that starts with "telnet", and then reloading the inetd configuration using the command "killall -1 inetd". Another option is to not start the inetd in the first place if you do not need any of the services provided by the inetd daemon. Disabling inetd permanently involves killing the running inetd process ("killall -TERM inetd") and setting the variable START_INETD in /etc/rc.config to "no" (as opposed to "yes"). Disabling the telnet service is the preliminary solution/workaround against the problems with the telnetd daemon. We hope to be able to provide a better solution. The SuSE Linux distributions 7.0, 7.1 and 7.2 have similar implementations of in.telnetd, and for all of these distributions there are update packages available. Please note that the package that contains the /usr/sbin/in.telnetd program (the server program) has changed over the different releases of the SuSE Linux distribution. In the 7.0 and 7.1 distributions the package is called "nkitserv". The 7.2 distribution lists the telnet server in the package "telnet-server". Please download the packages and verify them as described in section 3. After successfull authentication you can update your packages with the command `rpm -Uhv file.rpm'. Further action should not be necessary to activate the update since the in.telnetd daemon is started from a new by inetd upon every accepted connection from the network. Regardless of the availiability of fixed packages of the telnet-daemon, SuSE Security strongly recommend to disable the telnet service if you do not use it. In addition to that, only cryptographically protected protocols such as secure shell (ssh, package openssh) can be an efficient countermeasure against sniffing and spoofing type attacks. Due to significantly more comfort (such as X11-forwarding, multiple authentication methods, ...), the transition to ssh should be worth the effort in anycase. i386 Intel Platform: SuSE-7.2 0adc05af9762bd4c63eee464ca3131d1 source rpm: fe313553d1a6f022c7eb2f87ccd6772f SuSE-7.1 e0636eec04ccf2129b0e2ea0ee40c231 source rpm: 57760fcd8e064e89591203f7ba9adefc SuSE-7.0 e8a859d5a648a572fc08628247c1e2d6 source rpm: 33d4abc52926ac957f21b8c8aae7adce Sparc Platform: SuSE-7.1 3ef64d1cae35be51c9eff9bebcf4cf79 source rpm: 4cb76a16bd2f53c37a7cee728ea21c81 SuSE-7.0 f4901a4a271657d0379aff114d30b912 source rpm: ad909d8e3d2d0a617a5a9f6e3d7cd74d AXP Alpha Platform: SuSE-7.1 efad3412a8d333947bcf74695c023ea8 source rpm: 94d0dba0396e41b4afbd3ef61c4fd8aa SuSE-7.0 934525486e72a5cc98736f4cb1217f93 source rpm: a6623ff6d9439dea40f24ff35acefe99 Power PC Platform: SuSE-7.1 4da51d1a38095e81ee389094b0f21160 source rpm: 499b282f614835fe7a7b1a9ab039c56d SuSE-7.0 262f3fc3653042976c8cc36a2cd7e44d source rpm: 7cba8393bb8a71cf4d39fb480a71b42e ______________________________________________________________________________ 2) Pending vulnerabilities in SuSE Distributions and Workarounds: - w3m The w3m browser contains a buffer-overflow which allows remote-attackers to execute arbitrary code or to crash the w3m web-client when viewing special crafted sites. Please update to the newest w3m packages available on the ftp-server. - dip The dip program is executable as setuid root program for users in the "dialout" group, a privilege that has been issued by the administrator for a trusted user group. This bug will be corrected in future releases of the SuSE Linux distribution. ______________________________________________________________________________ 3) standard appendix: authenticity verification,additional information - Package authenticity verification: SuSE update packages are available on many mirror ftp servers all over the world. While this service is being considered valuable and important to the free and open source software community, many users wish to be sure about the origin of the package and its content before installing the package. There are two verification methods that can be used independently from each other to prove the authenticity of a downloaded file or rpm package: 1) md5sums as provided in the (cryptographically signed) announcement. 2) using the internal gpg signatures of the rpm package. 1) execute the command md5sum after you downloaded the file from a SuSE ftp server or its mirrors. Then, compare the resulting md5sum with the one that is listed in the announcement. Since the announcement containing the checksums is cryptographically signed (usually using the key
Sep 03, 2001
•Critical
SuSE
98
security advisorydenial of serviceRed HatRed Hat 6.0: RHSA-1999:029-01 Moderate: Telnetd Denial Of Service Fix
A denial of service attack has been fixed in in.telnetd. . Red Hat, Inc. Security Advisory Package in.telnetd Synopsis Denial of service attack in in.telnetd Advisory ID RHSA-1999:029-01 Issue Date 1999-08-19 Updated on Keywords telnet telnetd 1. Topic: A denial of service attack has been fixed in in.telnetd. 2. Bug IDs fixed: 4560 3. Relevant releases/architectures: Red Hat Linux 6.0, all architectures 4. Obsoleted by: None 5. Conflicts with: None 6. RPMs required: Intel: telnet- 0.10-29.i386.rpm Alpha: telnet- 0.10-29.alpha.rpm SPARC: telnet- 0.10-29.sparc.rpm Source: telnet- 0.10-29.src.rpm Architecture neutral: 7. Problem description: in.telnetd attempts to negotiate a compatible terminal type between the local and remote host. By setting the TERM environment variable before connecting, a remote user could cause the system telnetd to open files it should not. Depending on the TERM setting used, this could lead to denial of service attacks. Thanks go to Michal Zalewski and the Linux Security Audit team for noting this vulnerability. 8. Solution: For each RPM for your particular architecture, run: rpm -Uvh filename where filename is the name of the RPM. Then, restart inetd, by running: /etc/rc.d/init.d/inet restart 9. Verification: MD5 sum Package Name ------------------------------------------------------------------------- 4360d47490f13d60b8737d28dc88825a i386/telnet-0.10-29.i386.rpm 90213fcdca41a3ed12ab7d92344e7286 alpha/telnet-0.10-29.alpha.rpm 277787dbc39dff8ea84d4b16dcb7a954 sparc/telnet-0.10-29.sparc.rpm 269783a0754d234f7bef0f4717a8dbc2 SRPMS/telnet-0.10-29.src.rpm These packages are also PGP signed by Red Hat Inc. for security. Our key is available at: You can verify each package with the following command: rpm --checksig filename If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command: rpm --checksig --nopgp filename 10. References: . The Debian security team warns of urgent proftpd vulnerabilities that could enable remote exploits, offering crucial patches and guidance for sysadmins. Red Hat, Telnetd Fix, Denial Of Service, Security Advisory. . LinuxSecurity.com Team
Dec 07, 1999
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!