critical9.8
CVE-2018-20764
A buffer overflow exists in HelpSystems tcpcrypt on Linux, used for BoKS encrypted telnet through BoKS version 6.7.1.
Impact
A buffer overflow exists in HelpSystems tcpcrypt on Linux, used for BoKS encrypted telnet through BoKS version 6.7.1. Since tcpcrypt is setuid, exploitation leads to privilege escalation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Helpsystems | Boks | from 6.6.0 through 6.7.1 |