Jordan Windows Telnet Server 1.0/1.2 - 'Username' Stack Buffer Overrun (3)

Author: Luigi Auriemma
type: remote
platform: windows
port: 
date_added: 2003-12-29  
date_updated: 2012-12-31  
verified: 1  
codes: OSVDB-3257  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 23493.txt  
source: https://www.securityfocus.com/bid/9316/info

Jordan Windows Telnet Server has been reported prone to a remote buffer overrun vulnerability. The issue has been reported to present itself when a username of excessive length is supplied to the Telnet server. Due to a lack of bounds checking, when this username is copied into an insufficient reserved buffer in stack-based memory, data that exceeds the size of the buffer will overrun its bounds and corrupt adjacent memory. An attacker may exploit this condition to corrupt a saved instruction pointer for the vulnerable function.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/23493.zip