CVE-2001-0554
EXPLOITEDMIT Kerberos - Remote Code Execution via Malformed Telnet AYT Option
Title source: llmExploitation Summary
CVE-2001-0554 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including Dvorak.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in BSD-derived telnet daemons (CVE-2001-0554) by manipulating telnet protocol options to overflow a fixed-size buffer. It leverages heap manipulation to achieve remote code execution, specifically binding a shell to a port.
Description
Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.
Exploits (1)
This exploit targets a buffer overflow vulnerability in BSD-derived telnet daemons (CVE-2001-0554) by manipulating telnet protocol options to overflow a fixed-size buffer. It leverages heap manipulation to achieve remote code execution, specifically binding a shell to a port.