The remote NewStart CGSL host, running version MAIN 4.05, has krb5-appl packages installed that are affected by a vulnerability:

  - utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via     short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.
    (CVE-2020-10188)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 4.05, has telnet packages installed that are affected by a vulnerability:

  - utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via     short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.
    (CVE-2020-10188)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-4688:01 advisory.

    * telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code     (CVE-2020-10188)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Security fix for CVE-2020-10188

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:1335 advisory.

  - utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via     short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.
    (CVE-2020-10188)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1349 advisory.

  - telnet-server: no bounds checks in nextitem() function     allows to remotely execute arbitrary code     (CVE-2020-10188)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

telnet-server: no bounds checks in nextitem() function allows to remotely execute arbitrary code

According to the version of the telnet package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - The proglottis Go wrapper before 0.1.1 for the GPGME     library has a use-after-free, as demonstrated by use     for container image pulls by Docker or CRI-O. This     leads to a crash or potential code execution during GPG     signature verification.(CVE-2020-10188)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the telnet packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - utility.c in telnetd in netkit telnet through 0.17     allows remote attackers to execute arbitrary code via     short writes or urgent data, because of a buffer     overflow involving the netclear and nextitem     functions.(CVE-2020-10188)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5048-2 advisory.

    USN-5048-1 fixed a vulnerability in Inetutils for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. This update     provides the corresponding fixes for Ubuntu 16.04 ESM.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7781-1 advisory.

    Matthew Hickey discovered that Inetutils did not correctly handle certain escape characters. An attacker     could possibly use this issue to cause a denial of service. (CVE-2019-0053)

    It was discovered that Inetutils did not correctly handle certain memory operations. An attacker could     possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 14.04 LTS.
    (CVE-2020-10188)

    It was discovered that Inetutils did not correctly handle certain memory operations. An attacker could     possibly use this issue to cause a denial of service. (CVE-2022-39028)

    It was discovered that Inetutils did not check the return values of set*id functions. An attacker could     possibly use this issue to escalate their privileges. (CVE-2023-40303)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the netkit package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via     short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.
    (CVE-2020-10188)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
140274	NewStart CGSL MAIN 4.05 : krb5-appl Vulnerability (NS-SA-2020-0049)	Nessus	NewStart CGSL Local Security Checks	2020/9/7	2022/12/6	critical
140289	NewStart CGSL MAIN 4.05 : telnet Vulnerability (NS-SA-2020-0045)	Nessus	NewStart CGSL Local Security Checks	2020/9/7	2022/12/6	critical
294450	MiracleLinux 7 : telnet-0.17-65.el7 (AXSA:2020-4688:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/21	critical
135210	Fedora 30 : 1:telnet (2020-6b07ff2526)	Nessus	Fedora Local Security Checks	2020/4/6	2024/3/19	critical
135360	CentOS 6 : telnet (RHSA-2020:1335)	Nessus	CentOS Local Security Checks	2020/4/10	2024/10/9	critical
135362	CentOS 6 : krb5-appl (CESA-2020:1349)	Nessus	CentOS Local Security Checks	2020/4/10	2022/12/5	critical
135839	Scientific Linux Security Update : telnet on SL7.x x86_64 (20200407)	Nessus	Scientific Linux Local Security Checks	2020/4/21	2024/3/15	critical
136244	EulerOS Virtualization for ARM 64 3.0.2.0 : telnet (EulerOS-SA-2020-1541)	Nessus	Huawei Local Security Checks	2020/5/1	2024/3/13	critical
137035	EulerOS 2.0 SP5 : telnet (EulerOS-SA-2020-1617)	Nessus	Huawei Local Security Checks	2020/6/2	2024/3/8	critical
183586	Ubuntu 16.04 ESM : Inetutils vulnerability (USN-5048-2)	Nessus	Ubuntu Local Security Checks	2023/10/20	2024/10/29	critical
266306	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS : Inetutils vulnerabilities (USN-7781-1)	Nessus	Ubuntu Local Security Checks	2025/9/30	2025/10/1	critical
272274	Photon OS 5.0: Netkit PHSA-2025-5.0-0666	Nessus	PhotonOS Local Security Checks	2025/11/4	2025/11/5	critical
257218	Linux Distros Unpatched Vulnerability : CVE-2020-10188	Nessus	Misc.	2025/8/27	2026/4/28	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical