CVE-2004-0911: telnetd for netkit 0.17 and earlier, and possibly other versions, on Debian GNU/Linux allows remote attacke...

Security readout for executives and security teams

CVE-2004-0911 is a remote denial-of-service issue in Debian GNU/Linux netkit telnetd, reported for version 0.17 and earlier and possibly other versions. A remote attacker could crash or disrupt the Telnet service through an invalid pointer free. Business urgency is highest for systems still running legacy Telnet exposed to untrusted networks. Exposure is most likely on older Debian GNU/Linux systems running netkit telnetd, especially where Telnet is reachable from untrusted networks. Current exposure cannot be inferred from the bundle because affected CPEs and fixed package versions are not provided. Prioritize this when legacy Debian hosts still expose Telnet. The impact is service disruption rather than confirmed data compromise, but public advisories and remote reachability make exposed systems worth removing, patching, or isolating promptly. Mitigation focus: Review Debian DSA-556 and package guidance for fixed netkit telnetd versions.; Remove or disable telnetd where it is not operationally required.; Restrict Telnet access to trusted management networks only..

Prepared

Jun 30, 2026, 02:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.