CVE-2000-0665

GAMSoft TelSrv <= 1.5 - Denial of Service via Long Username

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2000-0665. PoCs published by Metasploit, aushack, including Metasploit module exploits/windows/telnet/gamsoft_telsrv_username.

AI-analyzed exploit summary This is a Metasploit module exploiting a stack-based buffer overflow in GAMSoft TelSrv 1.5 via a maliciously crafted username. It leverages SEH overwrites to achieve remote code execution on vulnerable Windows 2000 systems.

Description

GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username.

Exploits (2)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16816

This is a Metasploit module exploiting a stack-based buffer overflow in GAMSoft TelSrv 1.5 via a maliciously crafted username. It leverages SEH overwrites to achieve remote code execution on vulnerable Windows 2000 systems.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: GAMSoft TelSrv 1.5
No auth needed
Prerequisites: Network access to the target's Telnet service (port 23) · Vulnerable version of GAMSoft TelSrv (1.5)
devstral-2 · analyzed Feb 16, 2026 Full analysis →
metasploit WORKING POC NORMAL
by aushack · rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/telnet/gamsoft_telsrv_username.rb

This Metasploit module exploits a stack-based buffer overflow in GAMSoft TelSrv 1.5 via a maliciously crafted username during telnet authentication. The exploit leverages SEH overwrites and targets specific return addresses in ws2help.dll for Windows 2000 systems.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: GAMSoft TelSrv 1.5
No auth needed
Prerequisites: Network access to the target's telnet service (port 23) · Target running GAMSoft TelSrv 1.5
devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/4945
Third Party Advisory mailing-list x_refsource_ntbugtraq
http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0056.html
Exploit, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/1478
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/373
Exploit, Patch, Vendor Advisory mailing-list x_refsource_ntbugtraq
http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0031.html

Scores

EPSS 0.7167
EPSS Percentile 98.8%

Details

Status published
Products (2)
gamsoft/telsrv 1.4
gamsoft/telsrv 1.5
Published Jul 17, 2000
Tracked Since Feb 18, 2026