Lucene search

[email protected]CVE-2001-0247

HistoryJun 18, 2001 - 4:00 a.m.

CVE-2001-0247

2001-06-1804:00:00

[email protected]

web.nvd.nist.gov

cve-2001-0247

buffer overflow

bsd

ftp

remote attack

nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

High

0.019 Low

EPSS

Percentile

88.6%

JSON

Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2) g_lstat, (3) g_stat, and (4) the glob0 buffer as used in the glob functions glob2 and glob3.

Affected configurations

NVD

Node

mitkerberos_5Match1.1.1

mitkerberos_5Match1.2

mitkerberos_5Match1.2.1

mitkerberos_5Match1.2.2

sgiirixMatch6.1

sgiirixMatch6.5.1

sgiirixMatch6.5.2m

sgiirixMatch6.5.3

sgiirixMatch6.5.3f

sgiirixMatch6.5.3m

sgiirixMatch6.5.4

sgiirixMatch6.5.5

sgiirixMatch6.5.6

sgiirixMatch6.5.7

sgiirixMatch6.5.8

sgiirixMatch6.5.10

sgiirixMatch6.5.11

Node

freebsdfreebsdMatch2.2

freebsdfreebsdMatch2.2.2

freebsdfreebsdMatch2.2.3

freebsdfreebsdMatch2.2.4

freebsdfreebsdMatch2.2.5

freebsdfreebsdMatch2.2.6

freebsdfreebsdMatch2.2.8

freebsdfreebsdMatch3.0

freebsdfreebsdMatch3.1

freebsdfreebsdMatch3.2

freebsdfreebsdMatch3.3

freebsdfreebsdMatch3.4

freebsdfreebsdMatch3.5

freebsdfreebsdMatch3.5.1

freebsdfreebsdMatch4.0

freebsdfreebsdMatch4.1

freebsdfreebsdMatch4.1.1

freebsdfreebsdMatch4.2

netbsdnetbsdMatch1.2.1

netbsdnetbsdMatch1.3

netbsdnetbsdMatch1.3.1

netbsdnetbsdMatch1.3.2

netbsdnetbsdMatch1.3.3

netbsdnetbsdMatch1.4

netbsdnetbsdMatch1.4.1

netbsdnetbsdMatch1.4.2

netbsdnetbsdMatch1.4.3

netbsdnetbsdMatch1.5

openbsdopenbsdMatch2.3

openbsdopenbsdMatch2.4

openbsdopenbsdMatch2.5

openbsdopenbsdMatch2.6

openbsdopenbsdMatch2.7

openbsdopenbsdMatch2.8

CPENameOperatorVersion
mit:kerberos_5mit kerberos 5eq1.1.1
mit:kerberos_5mit kerberos 5eq1.2
mit:kerberos_5mit kerberos 5eq1.2.1
mit:kerberos_5mit kerberos 5eq1.2.2
sgi:irixsgi irixeq6.1
sgi:irixsgi irixeq6.5.1
sgi:irixsgi irixeq6.5.2m
sgi:irixsgi irixeq6.5.3
sgi:irixsgi irixeq6.5.3f
sgi:irixsgi irixeq6.5.3m

CPE	Name	Operator	Version
mit:kerberos_5	mit kerberos 5	eq	1.1.1
mit:kerberos_5	mit kerberos 5	eq	1.2
mit:kerberos_5	mit kerberos 5	eq	1.2.1
mit:kerberos_5	mit kerberos 5	eq	1.2.2
sgi:irix	sgi irix	eq	6.1
sgi:irix	sgi irix	eq	6.5.1
sgi:irix	sgi irix	eq	6.5.2m
sgi:irix	sgi irix	eq	6.5.3
sgi:irix	sgi irix	eq	6.5.3f
sgi:irix	sgi irix	eq	6.5.3m

Rows per page:

1-10 of 171

References

ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-018.txt.asc

ftp://patches.sgi.com/support/free/security/advisories/20010802-01-P

archives.neohapsis.com/archives/freebsd/2001-04/0466.html

www.cert.org/advisories/CA-2001-07.html

www.nai.com/research/covert/advisories/048.asp

www.securityfocus.com/bid/2548

exchange.xforce.ibmcloud.com/vulnerabilities/6332

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

High

0.019 Low

EPSS

Percentile

88.6%

JSON

Related for CVE-2001-0247

cvelist1 nessus1 nvd1 securityvulns2