PatchTheCVEtelnetd vulnerabilities
Recent CVEs affecting telnetd products. 2 tracked.
telnetd has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-06-20. Highest priority: CVE-2004-0998 (score 49/100).
- CVE-2005-2040 MEDIUM 5.0 DOWNGRADE Multiple buffer overflows in the getterminaltype function in telnetd for Heimdal before 0.6.5 may allow remote
- CVE-2004-0998 HIGH 7.5 DOWNGRADE DOWNGRADE Format string vulnerability in telnetd-ssl 0.17 and earlier allows remote attackers to execute arbitrary code.
FAQ
How do I fix telnetd vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is telnetd being exploited right now?
None of the tracked telnetd CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which telnetd CVE should I patch first?
CVE-2004-0998 currently ranks highest (49/100): Format string vulnerability in telnetd-ssl 0.17 and earlier allows remote attackers to execute arbitrary code..