telnet buffer overflow question

[abm086]

Hello,
I am trying to configure a Cisco 3660 router as a secure terminal server. Currently I am running IOS 12.1.14. After a local security scan I was informed that there could be a potential threat due to telnet buffer overflow. Whould upgrading the IOS fix this?

 

[marsd]

What security scanner did you use?
The telnet overflow I am aware of was keyed to some
versions of the login binary where env variables, etc..
could be passed on an overflow before auth and used to
get root level access. This was for *nix systems, not cisco gear.
I would check cisco's security boards and a forum like

http://www.securiteam.com

for info on this.