CVE-2001-0554

2001-08-1404:00:00

CWE-120

[email protected]

web.nvd.nist.gov

6305

cve-2001-0554

buffer overflow

bsd

telnetd

remote execution

ayt options

telrcv.

7.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.009 Low

EPSS

Percentile

82.8%

JSON

Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.

CPENameOperatorVersion
netkit:linux_netkitnetkit linux netkiteq0.10
mit:kerberosmit kerberoseq1.0
netkit:linux_netkitnetkit linux netkiteq0.12
sgi:irixsgi irixeq6.5
netkit:linux_netkitnetkit linux netkiteq0.11
mit:kerberos_5mit kerberos 5eq1.1
mit:kerberos_5mit kerberos 5eq1.2
mit:kerberos_5mit kerberos 5eq1.2.1
mit:kerberos_5mit kerberos 5eq1.2.2
mit:kerberos_5mit kerberos 5eq1.1.1

CPE	Name	Operator	Version
netkit:linux_netkit	netkit linux netkit	eq	0.10
mit:kerberos	mit kerberos	eq	1.0
netkit:linux_netkit	netkit linux netkit	eq	0.12
sgi:irix	sgi irix	eq	6.5
netkit:linux_netkit	netkit linux netkit	eq	0.11
mit:kerberos_5	mit kerberos 5	eq	1.1
mit:kerberos_5	mit kerberos 5	eq	1.2
mit:kerberos_5	mit kerberos 5	eq	1.2.1
mit:kerberos_5	mit kerberos 5	eq	1.2.2
mit:kerberos_5	mit kerberos 5	eq	1.1.1