CVE-2001-0554

mit kerberos Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Title source: VulnCheck
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2001-0554 has a selected CVSS score of 10.0; EIP currently links 1 catalogued exploit.

Description

Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Jul 18, 2001 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Catalogued exploits
1

Affected products and versions

1
ProductSourceVersion range

kerberos

Browse mit / kerberos
VulnCheckVersion data not supplied

Proofs of concept

1

Catalogued exploits

ExploitDBSolaris 2.x/7.0/8 / IRIX 6.5.x / OpenBSD 2.x / NetBSD 1.x / Debian 3 / HP-UX 10 - 'TelnetD' Remote Buffer OverflowExploitDB exploitby DvorakNot analyzed1 file
ExploitDB
PoC details

References

Showing 12 of 22