CVE-2001-0011

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Buffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.cert.org/advisories/CA-2001-02.htmlPatch, Third Party Advisory, US Government Resource
http://www.nai.com/research/covert/advisories/047.asp
http://www.redhat.com/support/errata/RHSA-2001-007.html
http://www.securityfocus.com/bid/2307
http://www.cert.org/advisories/CA-2001-02.htmlPatch, Third Party Advisory, US Government Resource
http://www.nai.com/research/covert/advisories/047.asp
http://www.redhat.com/support/errata/RHSA-2001-007.html
http://www.securityfocus.com/bid/2307

Timeline

Published: Feb 12, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-00125.0BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables.CVE-2001-001310.0Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.CVE-2001-00145.0Remote Data Protocol (RDP) in Windows 2000 Terminal Service does not properly handle certain malformed packets, which allows remote attacker CVE-2001-00157.2Network Dynamic Data Exchange (DDE) in Windows 2000 allows local users to gain SYSTEM privileges via a "WM_COPYDATA" message to an invisible CVE-2001-00167.2NTLM Security Support Provider (NTLMSSP) service does not properly check the function number in an LPC request, which could allow local user CVE-2001-00175.0Memory leak in PPTP server in Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed data packet, aka the "Malf CVE-2001-00185.0Windows 2000 domain controller in Windows 2000 Server, Advanced Server, or Datacenter Server allows remote attackers to cause a denial of se CVE-2001-00192.1Arrowpoint (aka Cisco Content Services, or CSS) allows local users to cause a denial of service via a long argument to the "show script," "c CVE-2001-00202.1Directory traversal vulnerability in Arrowpoint (aka Cisco Content Services, or CSS) allows local unprivileged users to read arbitrary files CVE-2001-002110.0MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the alternate_template CVE-2001-002210.0simplestguest.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the guestbook CVE-2001-002310.0everythingform.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the config p