MIT krb5’s supplied telnet client is vulnerable to buffer overflows in the functions slc_add_reply() and env_opt_add(). These can be exploited by a malicious server to which the client is trying to connect.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/36854/MITKRB5-SA-2005-001-telnet.txt
Source: https://packetstormsecurity.com/files/36854/MITKRB5-SA-2005-001-telnet.txt.html