CVE-2002-0333

Directory traversal vulnerability in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to read files with short names, and local users to read more files using a symlink with a short name, via a .. in the TTY argument.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

2.63% chance of exploitation in the next 30 days, 84th percentile

Published

2002-05-03

Updated

2024-08-08

Proof-of-concept exploits (1)

• http://marc.info/?l=bugtraq&m=101494896516467&w=2

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/21310

References

• CVE Record
• NVD entry

Related

• CVE-2002-0332
• CVE-2002-0334
• CVE-2002-0331
• CVE-2002-0335
• CVE-2002-0330
• CVE-2002-0336