Buffer overflow in the slc_add_reply function in various BSD-based Telnet clients, when handling LINEMODE suboptions, allows remote attackers to execute arbitrary code via a reply with a large number of Set Local Character (SLC) commands.
Max CVSS
7.5
EPSS Score
92.11%
Published
2005-05-02
Updated
2017-10-11
Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet clients allows remote attackers to execute arbitrary code via responses that contain a large number of characters that require escaping, which consumers more memory than allocated.
Max CVSS
7.5
EPSS Score
93.76%
Published
2005-05-02
Updated
2017-10-11
The default configuration of NCSA Telnet package for Macintosh and PC enables FTP, even though it does not include an "ftp=yes" line, which allows remote attackers to read and modify arbitrary files.
Max CVSS
7.5
EPSS Score
0.42%
Published
1991-09-10
Updated
2017-10-10
3 vulnerabilities found