CVE Vulnerabilities

CVE-2001-0247

Published: Jun 18, 2001 | Modified: Jan 21, 2020
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2) g_lstat, (3) g_stat, and (4) the glob0 buffer as used in the glob functions glob2 and glob3.

Affected Software

Name Vendor Start Version End Version
Kerberos_5 Mit 1.1.1 1.1.1
Kerberos_5 Mit 1.2 1.2
Kerberos_5 Mit 1.2.1 1.2.1
Kerberos_5 Mit 1.2.2 1.2.2
Irix Sgi 6.1 6.1
Irix Sgi 6.5.1 6.5.1
Irix Sgi 6.5.2m 6.5.2m
Irix Sgi 6.5.3 6.5.3
Irix Sgi 6.5.3f 6.5.3f
Irix Sgi 6.5.3m 6.5.3m
Irix Sgi 6.5.4 6.5.4
Irix Sgi 6.5.5 6.5.5
Irix Sgi 6.5.6 6.5.6
Irix Sgi 6.5.7 6.5.7
Irix Sgi 6.5.8 6.5.8
Irix Sgi 6.5.10 6.5.10
Irix Sgi 6.5.11 6.5.11

References