CVE-2002-0333
xtell < 1.91.1 and 2.x < 2.7 - Directory Traversal via TTY Argument
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2002-0333. PoCs published by spybreak.
AI-analyzed exploit summary This exploit leverages an information disclosure vulnerability in xtell by sending a maliciously formatted message to determine if a user is logged in without displaying or logging the message. The PoC uses a Perl command to generate a long string of 'A's and sends it via netcat to the target host on port 4224.
Description
Directory traversal vulnerability in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to read files with short names, and local users to read more files using a symlink with a short name, via a .. in the TTY argument.
Exploits (1)
This exploit leverages an information disclosure vulnerability in xtell by sending a maliciously formatted message to determine if a user is logged in without displaying or logging the message. The PoC uses a Perl command to generate a long string of 'A's and sends it via netcat to the target host on port 4224.