CVE-2018-20764

A buffer overflow exists in HelpSystems tcpcrypt on Linux, used for BoKS encrypted telnet through BoKS version 6.7.1. Since tcpcrypt is setuid, exploitation leads to privilege escalation.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-02-08

Last modified

2024-08-05

Affected products

• Boks (Helpsystems)

References

• https://community.helpsystems.com/knowledge-base/fox-technologies/hotfix/515/