Vulnerability in Xtell

CVE-2002-0333

Directory traversal vulnerability in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to read files with short names, and local users to read more files using a symlink with a short name, via a .. in the TTY argument.

EPSS: 0.026 (83.9th percentile) — read the EPSS interpretation.

Affected products

  • Xtell — versions 1.91.1, 2.6.1
  • N/a — versions n/a

References

  • cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
  • cve@mitre.org (vendor-advisory, Patch, x_refsource_DEBIAN, Vendor Advisory)
  • cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
  • cve@mitre.org (Exploit, Patch, vdb-entry, Vendor Advisory, x_refsource_XF)