CVE-2002-0334

CVE-2002-0334 affects xtell/xtelld; vulnerable are xtell 1.91.1 and earlier, and 2.x before 2.7. The issue is a local symlink attack on the temporary .xtell-log file that allows local users to modify files. OpenVAS/Nessus entries confirm Debian/DSA advisories; remediation involves upgrading to fi...

CVE-2002-0332: Undefined Security Weakness

Buffer overflows in xtell xtelld 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to execute arbitrary code via 1 a long DNS hostname that is determined using reverse DNS lookups, 2 a long AUTH string, or 3 certain data in the xtell request...

CVE-2002-0333: Undefined Security Weakness

Directory traversal vulnerability in xtell xtelld 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to read files with short names, and local users to read more files using a symlink with a short name, via a .. in the TTY argument...