PT-2008-1806 · Pragma · Pragma Telnetserver

Luigi Auriemma · Published 2008-01-09 · Updated 2017-08-08 · CVE-2008-0153

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Pragma TelnetServer version 7.0.4.589

Description The issue allows remote attackers to cause a denial of service, resulting in a process crash and resource exhaustion. This is achieved by sending a crafted TELOPT PRAGMA LOGON telnet option, which triggers a NULL pointer dereference.

Recommendations For Pragma TelnetServer version 7.0.4.589, consider disabling the telnetd.exe service until a patch is available to prevent remote attackers from exploiting this issue. Restrict access to the telnet service to minimize the risk of exploitation. Avoid using the TELOPT PRAGMA LOGON telnet option in the affected service until the issue is resolved.

Exploit

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2008-0153

Affected Products

Pragma Telnetserver

References · 6

• 🔥 https://exploit-db.com/exploits/30991 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-0153 · Security Note
• http://securityfocus.com/bid/27143 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39353 · Note
• http://aluigi.altervista.org/adv/pragmatel-adv.txt · Note
• http://marc.info/?l=bugtraq&m=119947184730448&w=2 · Note