Re: Remote Pre-Auth Buffer Overflow in GNU Inetutils telnetd (LINEMODE SLC)
Adiel Sol <[email protected]> Thu, 12 Mar 2026 14:05:37 +0000
| Newsgroups | gmane.comp.gnu.inetutils.bugs |
|---|---|
| Message-ID | <VI0PR10MB98342B01DB167BD4E208FD1CD044A@VI0PR10MB9834.EURPRD10.PROD.OUTLOOK.COM> |
SGkgR3VpbGxlbSwgU2ltb24sIENvbGluLAoKVGhhbmsgeW91IGZvciB5b3VyIHJlcGx5IGFuZCBm b3IgY2xhcmlmeWluZyBob3cgdGhpbmdzIHdvcmsuCkkgd2lsbCB3cml0ZSB0aGUgc2VjdXJpdHkg YWR2aXNvcnkgaW4gdGhlIG5leHQgZmV3IGRheXMgYW5kIHNlbmQgaXQgdG8geW91LiBJIHdpbGwg YWxzbyBzdGFydCB0aGUgQ1ZFIHByb2Nlc3Mgb24gb3VyIHNpZGUsIGFuZCBvbmNlIHdlIGhhdmUg YSBDVkUgYXNzaWduZWQgSSB3aWxsIHNoYXJlIHRoZSBDVkUgbnVtYmVyIHdpdGggeW91LgoKQmVz dCByZWdhcmRzLApBZGllbCBTb2wKRFJFQU0gU2VjdXJpdHkgUmVzZWFyY2ggVGVhbQoKCl9fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KRnJvbTogU2ltb24gSm9zZWZzc29u ClNlbnQ6IFRodXJzZGF5LCBNYXJjaCAxMiwgMjAyNiAyOjUzIFBNClRvOiBBZGllbCBTb2wKQ2M6 IENvbGxpbiBGdW5rOyBidWctaW5ldHV0aWxzQGdudS5vcmcKU3ViamVjdDogUmU6IFJlbW90ZSBQ cmUtQXV0aCBCdWZmZXIgT3ZlcmZsb3cgaW4gR05VIEluZXR1dGlscyB0ZWxuZXRkIChMSU5FTU9E RSBTTEMpCgpBZGllbCBTb2wgPGFkaWVsQGRyZWFtZ3JvdXAuY29tPiB3cml0ZXM6Cgo+IEhpIENv bGxpbiwKPiBUaGFuayB5b3UgZm9yIGNvbmZpcm1pbmcgdGhlIGZpbmRpbmdzIGFuZCBmb3IgdGhl IHB1bGwgcmVxdWVzdCBhbmQgdGhlCj4gY3JlZGl0IGluIHRoZSBORVdTIGZpbGU7IHdlIHJlYWxs eSBhcHByZWNpYXRlIGl0Lgo+IEEgY291cGxlIG9mIHF1ZXN0aW9ucyBhYm91dCBkaXNjbG9zdXJl Ogo+Cj4gICAxLiAgQXJlIHlvdSBwbGFubmluZyB0byByZXF1ZXN0IGEgQ1ZFIGZvciB0aGlzIGlz c3VlIChlLmcuIHRocm91Z2gKPiB0aGUgR05VIHByb2plY3Qgb3IgYW5vdGhlciBDTkEpLCBvciB3 b3VsZCB5b3UgcHJlZmVyIHRoYXQgd2UgcmVxdWVzdAo+IGl0IGZyb20gb3VyIHNpZGU/CgpHTlUg aXMgbm90IGEgQ05BLCBzbyBwbGVhc2UgYXNzaWduIGEgQ1ZFIGlmIHlvdSBjYW4gZG8gdGhpcy4g IFdlIGNhbgppbmNsdWRlIGl0IGluIHRoZSBORVdTIGVudHJ5LgoKPiAgIDIuCj4gRG8geW91IGhh dmUgYSByb3VnaCB0aW1lbGluZSBmb3Igd2hlbiB0aGUgZml4IHdpbGwgYmUgcmVsZWFzZWQKPiAo ZS5nLiBuZXh0IHJlbGVhc2Ugb3IgcGF0Y2ggYnJhbmNoKSwgYW5kIHdoZW4geW91IGV4cGVjdCB0 byBwdWJsaXNoCj4gdGhlIENWRSBvciBzZWN1cml0eSBhZHZpc29yeT8KCkFkaWVsIG9yIENvbGlu LCBkbyB5b3Ugd2FudCB0byB3cml0ZSBhIHNlY3VyaXR5IGFkdmlzb3J5PyAgTWF5YmUgdXNlIHRo ZQpmb2xsb3dpbmcgZm9yIGluc3BpcmF0aW9uOgoKaHR0cHM6Ly9saXN0cy5nbnUub3JnL2FyY2hp dmUvaHRtbC9idWctaW5ldHV0aWxzLzIwMjYtMDEvbXNnMDAwMDQuaHRtbAoKSSB0aGluayB3ZSBo YXZlIHdvcmtlZCB1cCB0byBhIG5ldyByZWxlYXNlLCBzbyBsZXQncyBwbGFuIHRoYXQgZm9yIG5v CmxhdGVyIHRoYW4gQXByaWwgMXN0LgoKPiAgIDMuCj4gV2hhdCBpcyB5b3VyIHByZWZlcnJlZCBw cm9jZXNzIGZyb20gaGVyZSB1bnRpbCBwdWJsaWMgZGlzY2xvc3VyZQo+IChlLmcuIGVtYmFyZ28g cGVyaW9kLCBjb29yZGluYXRlZCBhZHZpc29yeSwgb3IgYW55dGhpbmcgd2Ugc2hvdWxkCj4gYXZv aWQgZG9pbmcgdW50aWwgYSBjZXJ0YWluIGRhdGUpPwoKVGhlIGJ1Zy1pbmV0dXRpbHMgaXMgYSBw dWJsaWMgbGlzdCwgc28gdGhpcyBpcyBhbHJlYWR5IHB1YmxpYy4gIEknbSBub3QKYXdhcmUgb2Yg YW55IG5lZWQgdG8gZG8gYW55dGhpbmcgZnVydGhlciBleGNlcHQgbWFrZSB0aGUgcmVsZWFzZSwg YW5kIGlmCnNvbWVvbmUgaGFzIHRpbWUsIGFsc28gd3JpdGUgYW4gYWR2aXNvcnkgYWJvdXQgdGhp cy4KCi9TaW1vbgoKPiBXZSBhcmUgaGFwcHkgdG8gYWxpZ24gd2l0aCB5b3VyIHByb2Nlc3MgYW5k IHRpbWVsaW5lLgo+IEJlc3QgcmVnYXJkcywKPiBBZGllbCBTb2wKPiBEUkVBTSBTZWN1cml0eSBS ZXNlYXJjaCBUZWFtCj4KPgo+Cj4KPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwo+ IEZyb206IENvbGxpbiBGdW5rIDxjb2xsaW4uZnVuazFAZ21haWwuY29tPgo+IFNlbnQ6IFRodXJz ZGF5LCBNYXJjaCAxMiwgMjAyNiA5OjQ5IEFNCj4gVG86IEFkaWVsIFNvbCA8YWRpZWxAZHJlYW1n cm91cC5jb20+Cj4gQ2M6IGJ1Zy1pbmV0dXRpbHNAZ251Lm9yZyA8YnVnLWluZXR1dGlsc0BnbnUu b3JnPgo+IFN1YmplY3Q6IFJlOiBSZW1vdGUgUHJlLUF1dGggQnVmZmVyIE92ZXJmbG93IGluIEdO VSBJbmV0dXRpbHMgdGVsbmV0ZAo+IChMSU5FTU9ERSBTTEMpCj4KPiBbWW91IGRvbid0IG9mdGVu IGdldCBlbWFpbCBmcm9tIGNvbGxpbi5mdW5rMUBnbWFpbC5jb20uIExlYXJuIHdoeSB0aGlzCj4g aXMgaW1wb3J0YW50IGF0IGh0dHBzOi8vYWthLm1zL0xlYXJuQWJvdXRTZW5kZXJJZGVudGlmaWNh dGlvbiBdCj4KPiBBZGllbCBTb2wgPGFkaWVsQGRyZWFtZ3JvdXAuY29tPiB3cml0ZXM6Cj4KPj4g UHJvb2Ygb2YgQ29uY2VwdAo+Pgo+PiAxLiBTdGFydCBHTlUgSW5ldHV0aWxzIHRlbG5ldGQgKGUu Zy4gd2l0aCBpbmV0ZCBvciBydW4gdGVsbmV0ZAo+PiBtYW51YWxseSkgc28gaXQgbGlzdGVucyBv biBwb3J0IDIzLgo+PiAyLiBGcm9tIGFub3RoZXIgbWFjaGluZSwgY29ubmVjdCB0byB0aGUgdGVs bmV0IHBvcnQgYW5kIGNvbXBsZXRlIHRoZQo+PiBpbml0aWFsIGhhbmRzaGFrZS4gV2hlbiB0aGUg c2VydmVyIHNlbmRzIERPIExJTkVNT0RFLCByZXBseSB3aXRoCj4+IFdJTEwgTElORU1PREUgc28g dGhlIHNlcnZlciBlbnRlcnMgTElORU1PREUgbmVnb3RpYXRpb24uCj4+IDMuIFNlbmQgYSBzaW5n bGUgTElORU1PREUgU0xDIHN1Ym9wdGlvbiBjb250YWluaW5nIGF0IGxlYXN0IDQwIHRvIDUwCj4+ IHRyaXBsZXRzLCBlYWNoIHdpdGggYSBmdW5jdGlvbiBjb2RlIGdyZWF0ZXIgdGhhbiAxOCAoZS5n LiAxOSwgMjAsIDIxLAo+PiAuLi4gNjgpLiBFYWNoIHRyaXBsZXQgaXMgMyBieXRlcyAoZnVuYywg ZmxhZywgdmFsdWUpLiBVc2UgMHgwMCBmb3IKPj4gZmxhZyBhbmQgdmFsdWUuIFRoZSBzdWJvcHRp b24gbXVzdCBiZSBwcm9wZXJseSBmcmFtZWQgd2l0aCBJQUMgU0IKPj4gTElORU1PREUgTE1fU0xD IGF0IHRoZSBzdGFydCBhbmQgSUFDIFNFIGF0IHRoZSBlbmQuCj4+IDQuIFRoZSBzZXJ2ZXIgd2ls bCBjYWxsIGFkZF9zbGMoKSBmb3IgZWFjaCB0cmlwbGV0LiBBZnRlciBhYm91dCAzNQo+PiB0cmlw bGV0cyBpdCB3aWxsIHdyaXRlIHBhc3QgdGhlIGVuZCBvZiBzbGNidWYuIFlvdSBzaG91bGQgb2Jz ZXJ2ZSBhCj4+IGNyYXNoLCBvciAoaWYgeW91IGNyYWZ0IHRoZSBvdmVyZmxvdykgbWVtb3J5IGNv cnJ1cHRpb24gYW5kIHBvc3NpYmx5Cj4+IGNvZGUgZXhlY3V0aW9uLgo+Cj4gVGhhbmsgeW91IGZv ciB0aGUgZGV0YWlsZWQgYW5hbHlzaXMgYW5kIHJlcHJvZHVjdGlvbiBzdGVwcy4gSSBjb25maXJt Cj4geW91ciBmaW5kaW5ncy4KPgo+PiBDcmVkaXQgUmVxdWVzdAo+Pgo+PiBXZSBraW5kbHkgcmVx dWVzdCB0aGF0IHRoZSBmb2xsb3dpbmcgcmVzZWFyY2hlcnMgYmUgY3JlZGl0ZWQgZm9yCj4+IHRo aXMgZGlzY292ZXJ5Ogo+PiBBZGllbCBTb2wsIEFyYWQgSW5iYXIsIEVyZXogQ29oZW4sIE5pciBT b21lY2gsIEJlbiBHcmluYmVyZywgRGFuaWVsCj4+IEx1YmVsIC0gRFJFQU0gU2VjdXJpdHkgUmVz ZWFyY2ggVGVhbQo+PiBCZXN0IHJlZ2FyZHMsCj4+IOKAguKAguKAguKAgkRSRUFNIFNlY3VyaXR5 IFJlc2VhcmNoIFRlYW0KPgo+IEkgc3VibWl0dGVkIGEgcHVsbCByZXF1ZXN0IGp1c3Qgbm93IFsx XSwgYW5kIG1lbnRpb25lZCB5b3UgYWxsIGluIHRoZQo+IE5FV1MgZmlsZS4KPgo+IENvbGxpbgo+ Cj4gWzFdIGh0dHBzOi8vY29kZWJlcmcub3JnL2luZXR1dGlscy9pbmV0dXRpbHMvcHVsbHMvMTcv ZmlsZXMKPgo=