Mocha Telnet Lite for iOS 4.2 - 'User' Denial of Service | Advisories

Advisories

Mocha Telnet Lite for iOS 4.2 - 'User' Denial of Service

severity: none
date: January 29, 2026
Affecting: Mocha Telnet Lite for iOS 4.2
CVE: CVE-2020-36995
CWE: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CVSS: 0
CVSS V4 Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
References: ExploitDB-48728
Official App Store Page for Mocha Telnet Lite
Credit: Luis Martinez
Description: Mocha Telnet Lite for iOS 4.2 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the user configuration input. Attackers can overwrite the 'User' field with 350 bytes of repeated characters to trigger an application crash and prevent normal functionality.