CVE-2001-1340 Denial of service in n/a
Remote attackers can lock out the administrator account by connecting to the TelnetD service, causing a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2001-1340?
CVE-2001-1340 is a medium-severity denial of service vulnerability in n/a, published on 3 May 2002. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Beck GmbH IPC@Chip TelnetD service supports only one connection and does not disconnect a user who does not complete the login process, which allows remote attackers to lock out the administrator account by connecting to the service.
Which versions are affected by CVE-2001-1340?
It affects 1 product.
Products include Beck Ipc Gmbh Ipc at Chip Telnetd Server.
How do I fix CVE-2001-1340?
No fix has been published for CVE-2001-1340 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2001-1340 being exploited?
There is no known exploitation of CVE-2001-1340 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-8q69-632c-rphr.