Intrusion PreventionXtell.Multiple.Remote.Buffer.Overflow
Description
It indicates an attacker attempted a Buffer Overflow attack against xTell. Multiple vulnerabilities exist in xTell which could lead to a malicious user compromising a vulnerable system. If long strings are sent by a malicious DNS as a response to a reverse lookup performed by the Ident server, it could overflow a local buffer leading to possible remote code execution.
Affected Products
xtell xtell 2.6.1 and xtell xtell 1.91.1.
Impact
Compromise of the affected system.
Recommended Actions
Apply appropriate patch from the vendor or Upgrade to non-vulnerable version if available.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 10817 |
| Created | Aug 21, 2005 |
| Updated | Jun 09, 2022 |
| Risk |
|
| CVE ID | CVE-2002-0332 |
| Exploit Prediction Score | 39.32% |
| Default Action | drop |
| Active | |
| Affected OS | Linux, BSD, Other |
| Affected App | Other |