Telnet Client Information Disclosure Vulnerability

Overview A vulnerability in the handling of the NEW-ENVIRON command allows a malicious telnet server to gain information from a client's environment variables. Description The Telnet network protocol is described in RFC854 and RFC855 as a general, bi-directional communications facility. The Telne...

Allied Telesyn Router/Switch Default Password

The remote device appears to be an Allied Telesyn router or switch that can be accessed using default credentials. An attacker could leverage this issue to gain administrative access to the affected device. This password could also be potentially used to gain other sensitive information about the...

[SECURITY] [DSA 731-1] New krb4 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 731-1 [email protected] http://www.debian.org/security/ Martin Schulze June 2nd, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 731-1] New krb4 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 731-1 [email protected] http://www.debian.org/security/ Martin Schulze June 2nd, 2005 http://www.debian.org/security/faq -...

DSA-731-1 krb4 - buffer overflows

Bulletin has no description...

CVE-2005-1771

Summary (CVE-2005-1771) Unknown vulnerability in HP-UX Trusted System on versions B.11.00–B.11.23 may allow a remote attacker to gain unauthorized access, possibly via tools like remshd or telnet -t. Connected documents tie this CVE to HP patch advisories and NASL checks (e.g., HPSBUX01165, SSRT5...

Fedora Core 2 : telnet-0.17-28.FC2.1 (2005-277)

Two buffer overflow flaws were discovered in the way the telnet client handles messages from a server. An attacker may be able to execute arbitrary code on a victim's machine if the victim can be tricked into connecting to a malicious telnet server. The Common Vulnerabilities and Exposures projec...

Fedora Core 2 : krb5-1.3.6-4 (2005-269)

Updated krb5 packages which fix two buffer overflow vulnerabilities in the included Kerberos-aware telnet client are now available. Kerberos is a networked authentication system which uses a trusted third-party a KDC to authenticate clients and servers to each other. The krb5-workstation package...

CVE-2005-1566

Acrowave AAP-3100AR wireless router allows remote attackers to bypass authentication by pressing CTRL-C at the username or password prompt in a telnet session, which causes the shell to crash and restart, then leave the user in the new shell...

CVE-2005-1566

CVE-2005-1566 affects the Acrowave AAP-3100AR wireless router. Remote attackers can bypass authentication by pressing CTRL-C at the telnet username/password prompt, causing the shell to crash and restart and leaving the attacker in a new shell. Impact: partial confidentiality, integrity, and avai...

CVE-2005-1566

Acrowave AAP-3100AR wireless router allows remote attackers to bypass authentication by pressing CTRL-C at the username or password prompt in a telnet session, which causes the shell to crash and restart, then leave the user in the new shell...

Acrowave AAP-3100AR authetication bypass

I have found that It's possible to bypass the authentication on the Acrowave AAP-3100AR wireless router. By telnet'ing to the device and hitting CTRL + C at either the user name or password prompt, I crashed the shell, it was restarted and I was dropped to a prompt without entering any user name ...

602LAN SUITE Open Telnet Proxy

The remote host is running 602LAN SUITE with an open Telnet server proxy. By using through such a proxy, an attacker may be able to launch attacks that appear to originate from the remote host and possibly to access resources that are only available to machines on the same internal network as the...

CVE-2005-1456

Multiple unknown vulnerabilities in the 1 DHCP and 2 Telnet dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service abort...

CVE-2005-1456

Multiple unknown vulnerabilities in the 1 DHCP and 2 Telnet dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service abort...

CVE-2005-1456

CVE-2005-1456 affects Ethereal before 0.10.11, with multiple vulnerabilities in the DHCP and Telnet dissectors that allow remote denial of service (abort). The initial description notes DoS via malformed packets, while connected documents confirm the issue is addressed in Ethereal 0.10.11 (RHSA-2...

PT-2005-2452 · Ethereal +1 · Ethereal +1

Name of the Vulnerable Software and Affected Versions: Ethereal versions prior to 0.10.11 Description: The issue is related to multiple unknown vulnerabilities in the DHCP and Telnet dissectors. These vulnerabilities allow remote attackers to cause a denial of service, leading to an abort...

CVE-2005-0468

Heap-based buffer overflow in the envoptadd function in telnet.c for various BSD-based Telnet clients allows remote attackers to execute arbitrary code via responses that contain a large number of characters that require escaping, which consumers more memory than allocated...

CVE-2005-0468

Heap-based buffer overflow in the envoptadd function in telnet.c for various BSD-based Telnet clients allows remote attackers to execute arbitrary code via responses that contain a large number of characters that require escaping, which consumers more memory than allocated...

AZL-37050 CVE-2005-0469 affecting package telnet 0.17-81

Buffer overflow in the slcaddreply function in various BSD-based Telnet clients, when handling LINEMODE suboptions, allows remote attackers to execute arbitrary code via a reply with a large number of Set Local Character SLC commands...