CVE-2001-0609

Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog function.
References
Link Resource
http://archives.neohapsis.com/archives/bugtraq/2001-04/0202.html Broken Link Exploit Patch Vendor Advisory
http://www.securityfocus.com/bid/2576 Broken Link Exploit Patch Third Party Advisory VDB Entry Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6364 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:infodrom:cfingerd:*:*:*:*:*:*:*:*

History

15 Feb 2024, 21:29

Type Values Removed Values Added
CWE NVD-CWE-Other CWE-193
CVSS v2 : 10.0
v3 : unknown
v2 : 10.0
v3 : 9.8
CPE cpe:2.3:a:infodrom:cfingerd:1.4.0:*:*:*:*:*:*:*
cpe:2.3:a:infodrom:cfingerd:1.4.2:*:*:*:*:*:*:*
cpe:2.3:a:infodrom:cfingerd:1.4.1:*:*:*:*:*:*:*
References () http://archives.neohapsis.com/archives/bugtraq/2001-04/0202.html - Exploit, Patch, Vendor Advisory () http://archives.neohapsis.com/archives/bugtraq/2001-04/0202.html - Broken Link, Exploit, Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/2576 - Exploit, Patch, Vendor Advisory () http://www.securityfocus.com/bid/2576 - Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/6364 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/6364 - Third Party Advisory, VDB Entry

Information

Published : 2001-08-02 04:00

Updated : 2024-02-15 21:29


NVD link : CVE-2001-0609

Mitre link : CVE-2001-0609

CVE.ORG link : CVE-2001-0609


JSON object : View

Products Affected

infodrom

  • cfingerd
CWE
CWE-193

Off-by-one Error