CVE-2002-0333
MEDIUM 5.0EPSS 2.6%
Directory traversal vulnerability in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to read files with short names, and local users to read more files using a symlink with a short name, via a .. in the TTY argument.
- CVSS v2.0 NVD
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N - EPSS
- 2.63% chance of exploitation in the next 30 days, 85th percentile
- Published
- 2002-05-03
- Updated
- 2024-08-08
Proof-of-concept exploits (1)
ExploitDB entries (1)
Security advisories
- http://www.debian.org/security/2002/dsa-121
- http://www.iss.net/security_center/static/8313.php
- http://www.securityfocus.com/bid/4194