CVE-2001-0249

Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to generate long strings.
References
Link Resource
http://www.cert.org/advisories/CA-2001-07.html Patch Third Party Advisory US Government Resource
http://www.nai.com/research/covert/advisories/048.asp Broken Link
http://www.securityfocus.com/bid/2550 Broken Link Patch Third Party Advisory VDB Entry Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6332 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*
cpe:2.3:o:oracle:solaris:8:*:*:*:*:*:*:*
cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*

History

02 Feb 2024, 03:06

Type Values Removed Values Added
CPE cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*
cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*
cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*
cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*
cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*
cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*
cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*
cpe:2.3:o:oracle:solaris:8:*:*:*:*:*:*:*
cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*
First Time Oracle solaris
Sgi
Hp
Hp hp-ux
Sgi irix
Oracle
References () http://www.nai.com/research/covert/advisories/048.asp - () http://www.nai.com/research/covert/advisories/048.asp - Broken Link
References () http://www.securityfocus.com/bid/2550 - Patch, Vendor Advisory () http://www.securityfocus.com/bid/2550 - Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/6332 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/6332 - Third Party Advisory, VDB Entry
CVSS v2 : 10.0
v3 : unknown
v2 : 10.0
v3 : 9.8
CWE NVD-CWE-Other CWE-131

Information

Published : 2001-06-18 04:00

Updated : 2024-02-02 03:06


NVD link : CVE-2001-0249

Mitre link : CVE-2001-0249

CVE.ORG link : CVE-2001-0249


JSON object : View

Products Affected

hp

  • hp-ux

oracle

  • solaris

sgi

  • irix
CWE
CWE-131

Incorrect Calculation of Buffer Size