vendor:
InterAccess for Microsoft 95/98
by:
nemesystm of the DHC
7.5
CVSS
HIGH
Buffer Overflow
120
CWE
Product Name: InterAccess for Microsoft 95/98
Affected Version From: Pragma InterAccess 4.0
Affected Version To: Pragma InterAccess 4.0
Patch Exists: NO
Related CWE: N/A
CPE: a:pragma_systems:interaccess_for_microsoft_95/98
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2001
Pragma InterAccess for Microsoft 95/98 Buffer Overflow Vulnerability
Pragma InterAccess for Microsoft 95/98 is a fully-featured commercial Telnet server. Pragma InterAccess does not adequately compensate for large bursts of data being sent to port 23(telnet). If an excessive amount of characters(15000+) are sent to this port then the program will terminate and telnet services will shut down on that host. The daemon must be restarted to regain functionality. This may be due to a buffer overflow condition. If this is the case, it may be possible for attackers to execute arbitrary code on the target host.
Mitigation:
Ensure that the Telnet server is configured to limit the amount of data that can be sent to port 23.