CVE-2016-7115
CRITICALmac-telnet < 0.4.3 - Remote Code Execution via MT_CPTYPE_PASSSALT Control Packet
Title source: llmDescription
Buffer overflow in the handle_packet function in mactelnet.c in the client in MAC-Telnet 0.4.3 and earlier allows remote TELNET servers to execute arbitrary code via a long string in an MT_CPTYPE_PASSSALT control packet.
References (3)
Core 3
Core References
Issue Tracking, Patch x_refsource_confirm
https://github.com/haakonnessjoen/MAC-Telnet/commit/b69d11727d4f0f8cf719c79e3fb700f55ca03e9a
Issue Tracking, Patch x_refsource_confirm
https://github.com/haakonnessjoen/MAC-Telnet/pull/20
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/92699
Scores
CVSS v3
9.8
EPSS
0.0457
EPSS Percentile
90.5%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-119
Status
published
Products (1)
mac-telnet_project/mac-telnet
< 0.4.3
Published
Aug 30, 2016
Tracked Since
Feb 18, 2026