[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

255716

 
 

909

 
 

198991

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2001-0554Date: (C)2001-08-14   (M)2023-12-22


Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 10.0
Exploit Score: 10.0
Impact Score: 10.0
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE
  
Reference:
http://www.securityfocus.com/archive/1/197804
http://online.securityfocus.com/archive/1/199541
http://online.securityfocus.com/archive/1/199496
20010801-01-P
http://online.securityfocus.com/archive/1/203000
http://www.cisco.com/warp/public/707/catos-telrcv-vuln-pub.shtml
BID-3064
OSVDB-809
CA-2001-21
CLA-2001:413
CSSA-2001-030.0
CSSA-2001-SCO.10
DSA-070
DSA-075
FreeBSD-SA-01:49
HPSBUX0110-172
L-131
MDKSA-2001:068
MSS-OAR-E01-2001:298
NetBSD-SA2001-012
RHSA-2001:099
RHSA-2001:100
SSRT0745U
SuSE-SA:2001:029
telnetd-option-telrcv-bo(6875)

CPE    70
cpe:/o:sun:sunos:5.5.1
cpe:/o:freebsd:freebsd:2.1.6.1
cpe:/o:openbsd:openbsd:2.3
cpe:/o:openbsd:openbsd:2.2
...
CWE    1
CWE-120

© SecPod Technologies