CVE-2005-0469
Published · Updated
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 8.9%
exploitation probability
8.9%top 5% of all CVEs
observed exploitation
nono source reports it
Buffer overflow in the slc_add_reply function in various BSD-based Telnet clients, when handling LINEMODE suboptions, allows remote attackers to execute arbitrary code via a reply with a large number of Set Local Character (SLC) commands.
Affected products
n/a · n/aReferences
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:01.telnet.ascftp://patches.sgi.com/support/free/security/advisories/20050405-01-Phttp://secunia.com/advisories/14745http://secunia.com/advisories/17899https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9708http://sunsolve.sun.com/search/document.do?assetkey=1-26-101665-1http://sunsolve.sun.com/search/document.do?assetkey=1-26-101671-1http://sunsolve.sun.com/search/document.do?assetkey=1-26-57755-1http://sunsolve.sun.com/search/document.do?assetkey=1-26-57761-1http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-001-telnet.txthttp://www.debian.de/security/2005/dsa-731http://www.debian.org/security/2005/dsa-697