Lucene search
HistoryJun 25, 2002 - 4:00 a.m.
CVE-2002-0332
cve-2002-0332
information security
buffer overflows
remote code execution
xtell
7.8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.393 Low
EPSS
Percentile
97.2%
Buffer overflows in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to execute arbitrary code via (1) a long DNS hostname that is determined using reverse DNS lookups, (2) a long AUTH string, or (3) certain data in the xtell request.
| CPE | Name | Operator | Version |
|---|---|---|---|
| xtell:xtell | xtell | eq | 2.6.1 |
| xtell:xtell | xtell | eq | 1.91.1 |
Related
openvas
openvas
Debian Security Advisory DSA 121-1 (xtell)
2008-01-17 00:00:00
Debian Security Advisory DSA 121-1 (xtell)
2008-01-17 00:00:00
nessus
nessus
7.8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.393 Low
EPSS
Percentile
97.2%
Related for CVE-2002-0332