PT-2002-1004 · Debian · Xtel

Published 2002-05-03 · Updated 2016-10-18 · CVE-2002-0334

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions xtel (xtell) versions 1.91.1 and earlier xtel (xtell) versions 2.x before 2.7

Description The issue concerns multiple vulnerabilities in the xtel (xtell) package of the Debian GNU/Linux operating system. These vulnerabilities can be exploited to compromise the confidentiality, integrity, and availability of protected information. The exploitation can be carried out remotely.

Recommendations For xtel (xtell) versions 1.91.1 and earlier, update to a version later than 1.91.1 to resolve the issue. For xtel (xtell) versions 2.x before 2.7, update to version 2.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the .xtell-log file to prevent a symlink attack until a patch is available.

Fix

Related Identifiers

BDU:2015-01330

BDU:2015-02180

CVE-2002-0334

Affected Products

Xtel

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2002-0334 · Security Note
• https://bdu.fstec.ru/vul/2015-01330 · Security Note
• http://securityfocus.com/bid/4197 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0333 · Security Note
• https://bdu.fstec.ru/vul/2015-02180 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0332 · Security Note
• http://iss.net/security_center/static/8314.php · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0334 · Security Note
• http://debian.org/security/2002/dsa-121 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=101494896516467&w=2 · Note
• http://debian.org/security/dsa-090 · Note
• http://debian.org/security/dsa-121 · Note