Buffer overflows in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to execute arbitrary code via (1) a long DNS hostname that is determined using reverse DNS lookups, (2) a long AUTH string, or (3) certain data in the xtell request.
| Software | From | Fixed in |
|---|---|---|
| xtell / xtell | 2.6.1 | 2.6.1.x |
| xtell / xtell | 1.91.1 | 1.91.1.x |