Description
telnetd for netkit 0.17 and earlier, and possibly other versions, on Debian GNU/Linux allows remote attackers to cause a denial of service (free of an invalid pointer), a different vulnerability than CVE-2001-0554.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗Advisories 2
- DSA-569-1 netkit-telnet-ssl - invalid free(3) Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-556-1 netkit-telnet - invalid free(3) Debian Security (DSA / DLA) · Mar 9, 2026
References
- 20040918 Debian netkit telnetd vulnerability mailing-list
- DSA-556 vendor-advisory
- telnetd-netkit-bo(17540) vdb-entry
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=273694