10

CVE-2001-0053

Exploit
One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
David Madore ≫ Ftpd-bsd Version 0.2.3
Netbsd ≫ Netbsd Version 1.4
Netbsd ≫ Netbsd Version 1.4.1
Netbsd ≫ Netbsd Version 1.4.2
Netbsd ≫ Netbsd Version 1.5
Openbsd ≫ Openbsd Version 2.4
Openbsd ≫ Openbsd Version 2.5
Openbsd ≫ Openbsd Version 2.6
Openbsd ≫ Openbsd Version 2.7
Openbsd ≫ Openbsd Version 2.8
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 17.93% 0.968
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-018.txt.asc
http://archives.neohapsis.com/archives/bugtraq/2000-12/0275.html
Patch
http://www.openbsd.org/advisories/ftpd_replydirname.txt
Patch
Vendor Advisory
http://www.securityfocus.com/bid/2124
Patch
Vendor Advisory
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/5776