CVE-2004-0998
Description
A format string vulnerability in telnetd-ssl 0.17 and earlier allows remote attackers to execute arbitrary code via crafted SSL error messages.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
A format string vulnerability in telnetd-ssl 0.17 and earlier allows remote attackers to execute arbitrary code via crafted SSL error messages.
Vulnerability
telnetd-ssl, part of the Debian Netkit package, contains a format string vulnerability in versions 0.17 and earlier. The flaw occurs when the server processes specially crafted SSL error messages [1].
Exploitation
An attacker can trigger the vulnerability by sending a specially crafted SSL error message to a vulnerable telnetd-ssl server. No authentication is required; the attacker only needs network access to the telnet service [1].
Impact
Successful exploitation allows a remote attacker to execute arbitrary code on the affected system with the privileges of the telnetd process, typically root [1].
Mitigation
The vulnerability is fixed in Debian stable (woody) version 0.17.17+0.1-2woody3 and unstable (sid) version 0.17.24+0.1-6. Users should upgrade via DSA-616-1. No workaround is mentioned [1].
AI Insight generated on May 24, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.
Affected products
6cpe:2.3:a:telnetd:telnetd-ssl:0.17.17_0.1.1:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:telnetd:telnetd-ssl:0.17.17_0.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:telnetd:telnetd-ssl:0.17.17_0.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:telnetd:telnetd-ssl:0.17.17_0.1.2:*:woody1:*:*:*:*:*
- (no CPE)range: <=0.17
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- secunia.com/advisories/13663nvdPatchVendor Advisory
- www.debian.org/security/2004/dsa-616nvdPatchVendor Advisory
- www.kb.cert.org/vuls/id/995038nvdPatchThird Party AdvisoryUS Government Resource
- exchange.xforce.ibmcloud.com/vulnerabilities/18654nvd
News mentions
0No linked articles in our index yet.