Lucene search

[email protected]CVE-2001-0401

HistoryJun 18, 2001 - 4:00 a.m.

CVE-2001-0401

2001-06-1804:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2001-0401

buffer overflow

solaris 8

command execution

nvd.

8.2 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

0.4%

JSON

Buffer overflow in tip in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable.

CPENameOperatorVersion
sun:sunossun sunoseq5.7
sun:sunossun sunoseq5.5
sun:sunossun sunoseq5.5.1
sun:solarissun solariseq2.6
sun:sunossun sunosle5.9

CPE	Name	Operator	Version
sun:sunos	sun sunos	eq	5.7
sun:sunos	sun sunos	eq	5.5
sun:sunos	sun sunos	eq	5.5.1
sun:solaris	sun solaris	eq	2.6
sun:sunos	sun sunos	le	5.9

References

archives.neohapsis.com/archives/bugtraq/2001-03/0394.html

www.securityfocus.com/bid/2475

exchange.xforce.ibmcloud.com/vulnerabilities/6284

8.2 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

0.4%

JSON