CVE-2005-0469

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-05-02 · updated 2026-06-16

Description

Buffer overflow in the slc_add_reply function in various BSD-based Telnet clients, when handling LINEMODE suboptions, allows remote attackers to execute arbitrary code via a reply with a large number of Set Local Character (SLC) commands.

Affected products

Ncsa Telnet: all versions

References

http://secunia.com/advisories/14745
http://secunia.com/advisories/17899
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101665-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101671-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57755-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57761-1
http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-001-telnet.txt
http://www.debian.de/security/2005/dsa-731
http://www.debian.org/security/2005/dsa-697
http://www.debian.org/security/2005/dsa-699

Get alerted when CVE-2005-0469 or the next vulnerability affects your stack