Directory traversal vulnerability in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to read files with short names, and local users to read more files using a symlink with a short name, via a .. in the TTY argument.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Xtell | Xtell | 1.91.1 (including) | 1.91.1 (including) |
| Xtell | Xtell | 2.6.1 (including) | 2.6.1 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=101494896516467\u0026w=2
- http://www.debian.org/security/2002/dsa-121
- http://www.iss.net/security_center/static/8313.php
- http://www.securityfocus.com/bid/4194
- http://marc.info/?l=bugtraq\u0026m=101494896516467\u0026w=2
- http://www.debian.org/security/2002/dsa-121
- http://www.iss.net/security_center/static/8313.php
- http://www.securityfocus.com/bid/4194