Published: 25/06/2002 Updated: 18/10/2016

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Buffer overflows in xtell (xtelld) 1.91.1 and previous versions, and 2.x prior to 2.7, allows remote malicious users to execute arbitrary code via (1) a long DNS hostname that is determined using reverse DNS lookups, (2) a long AUTH string, or (3) certain data in the xtell request.

Vulnerable Product	Search on Vulmon	Subscribe to Product
xtell xtell 1.91.1
xtell xtell 2.6.1

source: wwwsecurityfocuscom/bid/4193/info xtell is a simple network messaging program It may be used to transmit terminal messages between users and machines xtell is available for Linux, BSD and most other Unix based operating systems Multiple buffer overflow vulnerabilities have been reported in some versions of xtell If long strin ...

NVD-CWE-Other http://www.debian.org/security/2002/dsa-121 http://www.securityfocus.com/bid/4193 http://www.iss.net/security_center/static/8312.php http://marc.info/?l=bugtraq&m=101494896516467&w=2 https://nvd.nist.gov https://www.exploit-db.com/exploits/21309/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2002-0332

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect