CVE-2002-0333: Xtell

Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days.

Directory traversal vulnerability in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to read files with short names, and local users to read more files using a symlink with a short name, via a .. in the TTY argument.

Affected products

• Xtell Xtell: version 1.91.1 only; version 2.6.1 only

Published 2002-06-25. Last modified 2026-06-16.