Directory traversal vulnerability in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to read files with short names, and local users to read more files using a symlink with a short name, via a .. in the TTY argument.
References
Link | Resource |
---|---|
http://marc.info/?l=bugtraq&m=101494896516467&w=2 | |
http://www.debian.org/security/2002/dsa-121 | Patch Vendor Advisory |
http://www.iss.net/security_center/static/8313.php | Exploit Patch Vendor Advisory |
http://www.securityfocus.com/bid/4194 | Exploit Patch Vendor Advisory |
http://marc.info/?l=bugtraq&m=101494896516467&w=2 | |
http://www.debian.org/security/2002/dsa-121 | Patch Vendor Advisory |
http://www.iss.net/security_center/static/8313.php | Exploit Patch Vendor Advisory |
http://www.securityfocus.com/bid/4194 | Exploit Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:38
Type | Values Removed | Values Added |
---|---|---|
References | () http://marc.info/?l=bugtraq&m=101494896516467&w=2 - | |
References | () http://www.debian.org/security/2002/dsa-121 - Patch, Vendor Advisory | |
References | () http://www.iss.net/security_center/static/8313.php - Exploit, Patch, Vendor Advisory | |
References | () http://www.securityfocus.com/bid/4194 - Exploit, Patch, Vendor Advisory |
Information
Published : 2002-06-25 04:00
Updated : 2024-11-20 23:38
NVD link : CVE-2002-0333
Mitre link : CVE-2002-0333
CVE.ORG link : CVE-2002-0333
JSON object : View
Products Affected
xtell
- xtell
CWE