GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of set*id() family functions in ftpd, rcp, rlogin, rsh, rshd, and uucpd. This is, for example, relevant if the setuid system call fails when a process is trying to drop privileges before letting an ordinary user control the activities of the process.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7781-1 advisory.

    Matthew Hickey discovered that Inetutils did not correctly handle certain escape characters. An attacker     could possibly use this issue to cause a denial of service. (CVE-2019-0053)

    It was discovered that Inetutils did not correctly handle certain memory operations. An attacker could     possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 14.04 LTS.
    (CVE-2020-10188)

    It was discovered that Inetutils did not correctly handle certain memory operations. An attacker could     possibly use this issue to cause a denial of service. (CVE-2022-39028)

    It was discovered that Inetutils did not check the return values of set*id functions. An attacker could     possibly use this issue to escalate their privileges. (CVE-2023-40303)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3611 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3611-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                       Guilhem Moulin     October 08, 2023                              https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : inetutils     Version        : 2:1.9.4-7+deb10u3     CVE ID         : CVE-2019-0053 CVE-2023-40303     Debian Bug     : 945861 1049365

    Security issues were discovered in inetutils, a collection of GNU     network utilities, which could lead to privilege escalation or     potentially execution of arbitrary code.

    CVE-2019-0053

        Thorsten Alteholz discovered that CVE-2019-0053 was patched         incorrectly in inetutils 2:1.9.4-7+deb10u3.  The original         vulnerability remained: inetutils' telnet client doesn't         sufficiently validate environment variables, which can lead to         stack-based buffer overflows.  (This issue is limited to local         exploitation from restricted shells.)

    CVE-2023-40303

        Jeffrey Bencteux discovered that several setuid(), setgid(),         seteuid() and setguid() return values were not checked in ftpd/         rcp/rlogin/rsh/rshd/uucpd code, which may lead to privilege         escalation.

    For Debian 10 buster, these problems have been fixed in version     2:1.9.4-7+deb10u3.

    We recommend that you upgrade your inetutils packages.

    For the detailed security status of inetutils please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/inetutils

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6304-1 advisory.

    It was discovered that telnetd in GNU Inetutils incorrectly handled certain inputs. An attacker could     possibly use this issue to cause a crash.

    This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS (CVE-2022-39028)

    It was discovered that Inetutils incorrectly handled certain inputs. An attacker could possibly use this     issue to expose sensitive information, or execute arbitrary code. (CVE-2023-40303)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
266306	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS : Inetutils vulnerabilities (USN-7781-1)	Nessus	Ubuntu Local Security Checks	critical
182761	Debian dla-3611 : inetutils-ftp - security update	Nessus	Debian Local Security Checks	high
180029	Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : Inetutils vulnerabilities (USN-6304-1)	Nessus	Ubuntu Local Security Checks	high

Detections

Analytics

CVE-2023-40303

high

Tenable Plugins

critical

high

high