Unrated severityNVD Advisory· Published Jun 25, 2002· Updated Apr 16, 2026

CVE-2002-0333

Description

Directory traversal vulnerability in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to read files with short names, and local users to read more files using a symlink with a short name, via a .. in the TTY argument.

Affected products

Xtell/Xtell2 versions
cpe:2.3:a:xtell:xtell:1.91.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:xtell:xtell:1.91.1:*:*:*:*:*:*:*
- cpe:2.3:a:xtell:xtell:2.6.1:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.debian.org/security/2002/dsa-121nvdPatchVendor Advisory
www.iss.net/security_center/static/8313.phpnvdExploitPatchVendor Advisory
www.securityfocus.com/bid/4194nvdExploitPatchVendor Advisory
marc.infonvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000