CVE:CVE-2011-4862
CNNVD:CNNVD-201112-439
FreeBSD是由Core Team团队负责的FreeBSD项目中的一套类Unix自由操作系统，是经过BSD、386BSD和4.4BSD发展而来的类Unix的一个重要分支。
FreeBSD 7.3至9.0版本, MIT Kerberos Version 5 Applications 1.0.2及之前版本和Heimdal 1.5.1及之前版本中的telnetd中的libtelnet/encrypt.c中存在缓冲区溢出漏洞。远程攻击者可借助超长encryption键执行任意代码。
solution:Upgrade gnu inetutils to a higher version than 1.9,and avoid the version (,1.9); Upgrade heimdal_project heimdal to a higher version than 1.5.1,and avoid the version (,1.5.1]; Upgrade mit krb5-appl to a higher version than 1.0.2,and avoid the version (,1.0.2]; Upgrade freebsd freebsd to a higher version than 9.0,and avoid the version [7.3,9.0]; Upgrade fedoraproject fedora to a higher version than 15,16,and avoid the version 15,16; Upgrade debian debian_linux to a higher version than 5.0,6.0,7.0,and avoid the version 5.0,6.0,7.0; Upgrade opensuse opensuse to a higher version than 11.3,11.4,and avoid the version 11.3,11.4; Upgrade suse linux_enterprise_desktop to a higher version than 10:sp4,11:sp1,and avoid the version 10:sp4,11:sp1; Upgrade suse linux_enterprise_server to a higher version than 9,10:sp2,10:sp3,10:sp4,11:sp1,and avoid the version 9,10:sp2,10:sp3,10:sp4,11:sp1; Upgrade suse linux_enterprise_software_development_kit to a higher version than 10:sp4,11:sp1,and avoid the version 10:sp4,11:sp1