CVEvulnerability
CVE-2002-0333
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2002-06-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Description
Directory traversal vulnerability in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to read files with short names, and local users to read more files using a symlink with a short name, via a .. in the TTY argument.
Affected configurations
• xtell xtell 1.91.1
• xtell xtell 2.6.1
References
- http://marc.info/?l=bugtraq&m=101494896516467&w=2 marc.info
- http://www.debian.org/security/2002/dsa-121 Patch, Vendor Advisory
- http://www.iss.net/security_center/static/8313.php Exploit, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/4194 Exploit, Patch, Vendor Advisory
- http://marc.info/?l=bugtraq&m=101494896516467&w=2 marc.info
- http://www.debian.org/security/2002/dsa-121 Patch, Vendor Advisory
- http://www.iss.net/security_center/static/8313.php Exploit, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/4194 Exploit, Patch, Vendor Advisory