10

CVE-2001-0554

Exploit
Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mit ≫ Kerberos Version 1.0
Mit ≫ Kerberos 5 Version 1.1
Mit ≫ Kerberos 5 Version 1.1.1
Mit ≫ Kerberos 5 Version 1.2
Mit ≫ Kerberos 5 Version 1.2.1
Mit ≫ Kerberos 5 Version 1.2.2
Netkit ≫ Linux Netkit Version 0.10
Netkit ≫ Linux Netkit Version 0.11
Netkit ≫ Linux Netkit Version 0.12
Sgi ≫ Irix Version 6.5
Freebsd ≫ Freebsd Version 2.0
Freebsd ≫ Freebsd Version 2.0.1
Freebsd ≫ Freebsd Version 2.0.5
Freebsd ≫ Freebsd Version 2.1 Update stable
Freebsd ≫ Freebsd Version 2.1.0
Freebsd ≫ Freebsd Version 2.1.5
Freebsd ≫ Freebsd Version 2.1.6
Freebsd ≫ Freebsd Version 2.1.6.1
Freebsd ≫ Freebsd Version 2.1.7
Freebsd ≫ Freebsd Version 2.1.7.1
Freebsd ≫ Freebsd Version 2.2
Freebsd ≫ Freebsd Version 2.2 Update current
Freebsd ≫ Freebsd Version 2.2.1
Freebsd ≫ Freebsd Version 2.2.2
Freebsd ≫ Freebsd Version 2.2.3
Freebsd ≫ Freebsd Version 2.2.4
Freebsd ≫ Freebsd Version 2.2.5
Freebsd ≫ Freebsd Version 2.2.6
Freebsd ≫ Freebsd Version 2.2.7
Freebsd ≫ Freebsd Version 2.2.8
Freebsd ≫ Freebsd Version 3.0
Freebsd ≫ Freebsd Version 3.0 Update releng
Freebsd ≫ Freebsd Version 3.1
Freebsd ≫ Freebsd Version 3.2
Freebsd ≫ Freebsd Version 3.3
Freebsd ≫ Freebsd Version 3.4
Freebsd ≫ Freebsd Version 3.5
Freebsd ≫ Freebsd Version 3.5 Update stable
Freebsd ≫ Freebsd Version 3.5.1
Freebsd ≫ Freebsd Version 3.5.1 Update release
Freebsd ≫ Freebsd Version 3.5.1 Update stable
Freebsd ≫ Freebsd Version 4.0
Freebsd ≫ Freebsd Version 4.0 Update alpha
Freebsd ≫ Freebsd Version 4.0 Update releng
Freebsd ≫ Freebsd Version 4.1
Freebsd ≫ Freebsd Version 4.1.1
Freebsd ≫ Freebsd Version 4.2
Freebsd ≫ Freebsd Version 4.3
Ibm ≫ Aix Version 4.3
Ibm ≫ Aix Version 4.3.1
Ibm ≫ Aix Version 4.3.2
Ibm ≫ Aix Version 4.3.3
Ibm ≫ Aix Version 5.1
Netbsd ≫ Netbsd Version 1.0
Netbsd ≫ Netbsd Version 1.1
Netbsd ≫ Netbsd Version 1.2
Netbsd ≫ Netbsd Version 1.2.1
Netbsd ≫ Netbsd Version 1.3
Netbsd ≫ Netbsd Version 1.3.1
Netbsd ≫ Netbsd Version 1.3.2
Netbsd ≫ Netbsd Version 1.3.3
Netbsd ≫ Netbsd Version 1.4
Netbsd ≫ Netbsd Version 1.4.1
Netbsd ≫ Netbsd Version 1.4.2
Netbsd ≫ Netbsd Version 1.4.3
Netbsd ≫ Netbsd Version 1.5
Netbsd ≫ Netbsd Version 1.5.1
Openbsd ≫ Openbsd Version 2.0
Openbsd ≫ Openbsd Version 2.1
Openbsd ≫ Openbsd Version 2.2
Openbsd ≫ Openbsd Version 2.3
Openbsd ≫ Openbsd Version 2.4
Openbsd ≫ Openbsd Version 2.5
Openbsd ≫ Openbsd Version 2.6
Openbsd ≫ Openbsd Version 2.7
Openbsd ≫ Openbsd Version 2.8
Sun ≫ Solaris Version 2.6
Sun ≫ Sunos Version 5.0
Sun ≫ Sunos Version 5.1
Sun ≫ Sunos Version 5.2
Sun ≫ Sunos Version 5.3
Sun ≫ Sunos Version 5.4
Sun ≫ Sunos Version 5.5
Sun ≫ Sunos Version 5.5.1
Sun ≫ Sunos Version 5.7
Sun ≫ Sunos Version 5.8
Debian ≫ Debian Linux Version 2.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 38.49% 0.984
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:49.telnetd.asc
Patch
Vendor Advisory
Broken Link
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-012.txt.asc
Broken Link
ftp://patches.sgi.com/support/free/security/advisories/20010801-01-P
Broken Link
ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.10/CSSA-2001-SCO.10.txt
Broken Link
http://archives.neohapsis.com/archives/hp/2001-q4/0014.html
Broken Link
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000413
Broken Link
http://ftp.support.compaq.com/patches/.new/html/SSRT0745U.shtml
Broken Link
http://online.securityfocus.com/advisories/3476
Third Party Advisory
Broken Link
VDB Entry
http://online.securityfocus.com/archive/1/199496
Third Party Advisory
Broken Link
VDB Entry
http://online.securityfocus.com/archive/1/199541
Third Party Advisory
Broken Link
VDB Entry
http://online.securityfocus.com/archive/1/203000
Third Party Advisory
Broken Link
VDB Entry
http://www.calderasystems.com/support/security/advisories/CSSA-2001-030.0.txt
Broken Link
http://www.cert.org/advisories/CA-2001-21.html
Patch
Third Party Advisory
US Government Resource
http://www.ciac.org/ciac/bulletins/l-131.shtml
Broken Link
http://www.cisco.com/warp/public/707/catos-telrcv-vuln-pub.shtml
Third Party Advisory
http://www.debian.org/security/2001/dsa-070
Third Party Advisory
http://www.debian.org/security/2001/dsa-075
Third Party Advisory
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-068.php3
Broken Link
http://www.novell.com/linux/security/advisories/2001_029_nkitb_txt.html
Broken Link
http://www.osvdb.org/809
Broken Link
http://www.redhat.com/support/errata/RHSA-2001-099.html
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2001-100.html
Third Party Advisory
http://www.securityfocus.com/archive/1/197804
Third Party Advisory
Vendor Advisory
Exploit
VDB Entry
http://www.securityfocus.com/bid/3064
Patch
Third Party Advisory
Vendor Advisory
Exploit
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/6875
Third Party Advisory
VDB Entry