CVE-2005-0469

CVE-2005-0469 is a buffer overflow in the LINEMODE handling path (slc_add_reply) in BSD-based Telnet clients. The connected Mariner entry notes CVE-2005-0469 affecting telnet 0.17-81 with no patch available yet. The root cause is a buffer overflow triggered by replies containing a large number of...

CVE-2005-0468

Heap-based buffer overflow in the envoptadd function in telnet.c for various BSD-based Telnet clients allows remote attackers to execute arbitrary code via responses that contain a large number of characters that require escaping, which consumers more memory than allocated...

CVE-2005-0468

CVE-2005-0468 is a heap-based buffer overflow in the env_opt_add function of telnet clients (telnet.c) for BSD-based implementations. An attacker can trigger it by sending responses with many characters requiring escaping, causing the client to overflow memory and potentially execute arbitrary co...

CVE-2005-0468

Heap-based buffer overflow in the envoptadd function in telnet.c for various BSD-based Telnet clients allows remote attackers to execute arbitrary code via responses that contain a large number of characters that require escaping, which consumers more memory than allocated...

CVE-2005-0469

Buffer overflow in the slcaddreply function in various BSD-based Telnet clients, when handling LINEMODE suboptions, allows remote attackers to execute arbitrary code via a reply with a large number of Set Local Character SLC commands...

FreeBSD-SA-05:01.telnet

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:01.telnet Security Advisory The FreeBSD Project Topic: telnet client buffer overflows Category: contrib Module: contrib/telnet Announced: 2005-03-28 Credits:...

Multiple Vendor Telnet Client - Env_opt_add Heap Buffer Overflow

Multiple Vendor Telnet Client - Envoptadd Heap Buffer Overflow source: https://www.securityfocus.com/bid/12919/info Multiple vendors' Telnet client applications are reported prone to a remote buffer-overflow vulnerability. This vulnerability reportedly occurs in the 'envoptadd' function in the...

Multiple Vendor Telnet Client - Env_opt_add Heap Buffer Overflow

source: https://www.securityfocus.com/bid/12919/info Multiple vendors' Telnet client applications are reported prone to a remote buffer-overflow vulnerability. This vulnerability reportedly occurs in the 'envoptadd' function in the 'telnet.c' source file, which is apparently common source for all...

CVE-2005-0868

AS/400 Telnet 5250 terminal emulation clients, as implemented by 1 IBM client access, 2 Bosanova, 3 PowerTerm, 4 Mochasoft, and possibly other emulations, allows malicious AS/400 servers to execute arbitrary commands via a STRPCO Start PC Organizer command followed by STRPCCMD Start PC command, a...

CVE-2005-0868

CVE-2005-0868 affects AS/400 Telnet 5250 terminal emulation clients, including IBM client access, Bosanova, PowerTerm, Mochasoft (and possibly others). The root issue allows a malicious AS/400 server to execute arbitrary commands by sending a STRPCO (Start PC Organizer) command followed by STRPCC...

CVE-2002-1629

CVE-2002-1629 affects multiple MultiTech ProxyServer models (MTPSR1-100, MTPSR1-120, MTPSR1-202ST, MTPSR2-201, MTPSR3-200). The issue is caused by a default/null password on the remote administration account (supervisor), allowing remote attackers to gain administrative privileges via Telnet or H...

CVE-2002-1629

Multi-Tech ProxyServer products MTPSR1-100, MTPSR1-120, MTPSR1-202ST, MTPSR2-201, and MTPSR3-200 ship with a null password, which allows remote attackers to gain administrative privileges via Telnet or HTTP...

CVE-2001-1428

The CVE-2001-1428 entry concerns Beck GmbH IPC@Chip where the FTP and Telnet services ship with a default password, enabling remote attackers to gain unauthorized access. The underlying issue is a default credential disclosure in core services, leading to potential partial confidentiality, integr...

CVE-2005-0865

Samsung ADSL Modem SMDK8947v1.2 uses default passwords for the 1 root, 2 admin, or 3 user users, which allows remote attackers to gain privileges via Telnet or an HTTP request to adsl.cgi...

CVE-2005-0865

The CVE-2005-0865 issue affects Samsung ADSL Modem SMDK8947v1.2, where default credentials (root, admin, or user) enable remote privilege escalation via Telnet or HTTP to adsl.cgi. Root cause: use of default passwords leading to unauthorized access. Impact: authenticated/privileged access with ne...

gtscrash.c.txt

/ GoodTech Telnet Server Buffer Overflow Crash POC created by Komrade e-mail: unsecureataltervistadotorg web: http://unsecure.altervista.org Tested on GoodTech Telnet Server versions 4.0 - 5.0 versions prior to 5.0.7 on a Windows XP Professional sp2 operating system. This exploit connects to the...

Unpassworded 'help' Account

The account 'help' on the remote host does not have a password set. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "help"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid17575;...

CVE-2005-0768

CVE-2005-0768 concerns a buffer overflow in the administration web server of GoodTech Telnet Server (versions 4.0 and 5.0, possibly all versions before 5.0.7) that can be triggered by sending a long string to port 2380. The vulnerability is described as allowing remote code execution. Public refe...

CVE-2005-0768

Buffer overflow in the administration web server for GoodTech Telnet Server 4.0 and 5.0, and possibly all versions before 5.0.7, allows remote attackers to execute arbitrary code via a long string to port 2380...

GoodTech Telnet Server Buffer Overflow Vulnerability

AUTHOR Komrade [email protected] Original advisory: http://unsecure.altervista.org/security/goodtechtelnet.htm DATE 15/03/2005 PRODUCT The product turns a Windows NT/2000/XP/2003 system into a multi-user Telnet server. Gives Telnet users full access to Windows NT command line. informations...