PT-2020-9980 · D Link · D-Link Dap-1360

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1360 revision F versions 609EU through 613EUbeta D-Link DAP-1360 revision F versions through 6.12b01 Description: An issue was discovered on D-Link DAP-1360 revision F devices, allowing remote attackers to start a telnet service...

Huawei Data Communication: Read telnet server status

Get the current Telnet server configuration of the VRP device. Note: This script only stores information for other Policy Controls. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Huawei Data Communication: Disabling the Telnet Service

The Telnet login mode is insecure. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it...

Security Advisory 0048

Security Advisory 0048 PDF Date: May 13, 2020 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | May 13, 2020 | Initial Release The CVE-ID tracking this issue: CVE-2020-10188 CVSSv3 Base Score: 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Description: This security advisory documents the exposur...

Amazon Linux 2 : telnet (ALAS-2020-1422)

The version of telnet installed on the remote host is prior to 0.17-65. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1422 advisory. utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data...

Important: telnet

Issue Overview: utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions. CVE-2020-10188 Affected Packages: telnet Note: This advisory is...

zeek -- Various vulnerabilities

Jon Siwek of Corelight reports: This release fixes the following security issues: Fix potential stack overflow in NVT analyzer Fix NVT analyzer memory leak from multiple telnet authn name options Fix multiple content-transfer-encoding headers causing a memory leak Fix potential leak of Analyzers...

EulerOS Virtualization for ARM 64 3.0.2.0 : telnet (EulerOS-SA-2020-1541)

According to the version of the telnet package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container...

Huawei EulerOS: Security Advisory for telnet (EulerOS-SA-2020-1541)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei VRP Default Credentials (Telnet)

The remote Huawei Versatile Routing Platform VRP device is using known default credentials for the Telnet login. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Huawei VRP Detection (Telnet)

This script performs an Telnet banner based detection of Huawei Versatile Routing Platform VRP network devices. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

CVE-2020-8797

Juplink RX4-1500 v1.0.3 allows remote attackers to gain root access to the Linux subsystem via an unsanitized exec call aka Command Line Injection, if the undocumented telnetd service is enabled and the attacker can authenticate as admin from the local network...

Scientific Linux Security Update : telnet on SL7.x x86_64 (20200407)

telnet-server: no bounds checks in nextitem function allows to remotely execute arbitrary code C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135839; scriptversion"1.6"; scriptsetattributeattribute:"pluginmodificationdate",...

DrayTek Vigor Detection (Telnet)

Telnet based detection of DrayTek Vigor devices. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated krb5-appl packages fix security vulnerability

Updated krb5-appl packages fix security vulnerability: A vulnerability was found where incorrect bounds checks in the telnet server’s telnetd handling of short writes and urgent data, could lead to information disclosure and corruption of heap data. An unauthenticated remote attacker could exploi...

MGASA-2020-0169 Updated krb5-appl packages fix security vulnerability

Updated krb5-appl packages fix security vulnerability: A vulnerability was found where incorrect bounds checks in the telnet server’s telnetd handling of short writes and urgent data, could lead to information disclosure and corruption of heap data. An unauthenticated remote attacker could exploi...

Oracle Linux 6 : krb5-appl (ELSA-2020-1349)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1349 advisory. - Fix CVE-2020-10188 netclear/nextitem buffer overrun Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

Grandstream GXP IP Phone Detection (Telnet)

Telnet based detection of Grandstream GXP IP phones. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-14326

An issue was discovered in AndyOS Andy versions up to 46.11.113. By default, it starts telnet and ssh ports 22 and 23 with root privileges in the emulated Android system. This can be exploited by remote attackers to gain full access to the device, or by malicious apps installed inside the emulato...

CVE-2019-14326

Summary: CVE-2019-14326 affects AndyOS Andy up to 46.11.113. By default, the emulator starts telnet and ssh (ports 22 and 23) with root privileges inside the emulated Android system. This enables potential remote access to a root shell, and also allows privilege escalation from a normal user to r...