https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2002-0334.htmlhttps://patchthecve.com/cve/CVE-2002-0334.htmlTue, 16 Jun 2026 21:57:14 +0000LOW 2.1: xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows local users to modify files via a symlink attack on the .xtell-log file.https://patchthecve.com/cve/CVE-2002-0333.htmlhttps://patchthecve.com/cve/CVE-2002-0333.htmlTue, 16 Jun 2026 21:57:14 +0000MEDIUM 5.0: Directory traversal vulnerability in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to read files with short names, and local users to read more files using a symlink with a short name, via a .. in the TTY argument.https://patchthecve.com/cve/CVE-2002-0332.htmlhttps://patchthecve.com/cve/CVE-2002-0332.htmlTue, 16 Jun 2026 21:57:14 +0000HIGH 7.5: Buffer overflows in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to execute arbitrary code via (1) a long DNS hostname that is determined using reverse DNS lookups, (2) a long AUTH string, or (3) certain data in the xtell request.