Lucene search

[email protected]CVE-2001-0440

HistorySep 18, 2001 - 4:00 a.m.

CVE-2001-0440

2001-09-1804:00:00

[email protected]

web.nvd.nist.gov

cve-2001-0440

licq

buffer overflow

dos

potential arbitrary cmd execution

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

High

0.059 Low

EPSS

Percentile

93.4%

JSON

Buffer overflow in logging functions of licq before 1.0.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands.

Affected configurations

NVD

Node

licqlicqRange≤1.0.2

conectivalinuxMatch4.0

conectivalinuxMatch4.0es

conectivalinuxMatch4.1

conectivalinuxMatch4.2

conectivalinuxMatch5.0

conectivalinuxMatch5.1

conectivalinuxMatch6.0

conectivalinuxMatchecommerce

conectivalinuxMatchprg_graficos

Node

mandrakesoftmandrake_linuxMatch7.1

mandrakesoftmandrake_linuxMatch7.2

CPENameOperatorVersion
licq:licqlicqle1.0.2
conectiva:linuxconectiva linuxeq4.0
conectiva:linuxconectiva linuxeq4.0es
conectiva:linuxconectiva linuxeq4.1
conectiva:linuxconectiva linuxeq4.2
conectiva:linuxconectiva linuxeq5.0
conectiva:linuxconectiva linuxeq5.1
conectiva:linuxconectiva linuxeq6.0
conectiva:linuxconectiva linuxeqecommerce
conectiva:linuxconectiva linuxeqprg_graficos

CPE	Name	Operator	Version
licq:licq	licq	le	1.0.2
conectiva:linux	conectiva linux	eq	4.0
conectiva:linux	conectiva linux	eq	4.0es
conectiva:linux	conectiva linux	eq	4.1
conectiva:linux	conectiva linux	eq	4.2
conectiva:linux	conectiva linux	eq	5.0
conectiva:linux	conectiva linux	eq	5.1
conectiva:linux	conectiva linux	eq	6.0
conectiva:linux	conectiva linux	eq	ecommerce
conectiva:linux	conectiva linux	eq	prg_graficos

References

archives.neohapsis.com/archives/freebsd/2001-04/0607.html

distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000389

www.linux-mandrake.com/en/security/2001/MDKSA-2001-032.php3

www.osvdb.org/5601

www.redhat.com/support/errata/RHSA-2001-022.html

www.redhat.com/support/errata/RHSA-2001-023.html

exchange.xforce.ibmcloud.com/vulnerabilities/6645

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

High

0.059 Low

EPSS

Percentile

93.4%

JSON

Related for CVE-2001-0440

nvd1 cvelist1 nessus1