First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2001-0173

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Buffer overflow in qDecoder library 5.08 and earlier, as used in CrazyWWWBoard, CrazySearch, and other CGI programs, allows remote attackers to execute arbitrary commands via a long MIME Content-Type header.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2001-01/0486.htmlExploit, Vendor Advisory
http://www.securityfocus.com/bid/2329Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6033
http://archives.neohapsis.com/archives/bugtraq/2001-01/0486.htmlExploit, Vendor Advisory
http://www.securityfocus.com/bid/2329Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6033

Timeline

Published: May 3, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-01747.6Buffer overflow in Trend Micro Virus Buster 2001 8.00 allows remote attackers to cause a denial of service, and possibly execute arbitrary c CVE-2001-01755.0The caching module in Netscape Fasttrack Server 4.1 allows remote attackers to cause a denial of service (resource exhaustion) by requesting CVE-2001-01767.2The setuid doroot program in Voyant Sonata 3.x executes arbitrary command line arguments, which allows local users to gain root privileges.CVE-2001-01775.0WebMaster ConferenceRoom 1.8.1 allows remote attackers to cause a denial of service via a buddy relationship between the IRC server and a se CVE-2001-01782.1kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a password, which allows CVE-2001-01795.0Allaire JRun 3.0 allows remote attackers to list contents of the WEB-INF directory, and the web.xml file in the WEB-INF directory, via a mal CVE-2001-018010.0Lars Ellingsen guestserver.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the "email" parameter.CVE-2001-018110.0Format string vulnerability in the error logging code of DHCP server and client in Caldera Linux allows remote attackers to execute arbitrar CVE-2001-01825.0FireWall-1 4.1 with a limited-IP license allows remote attackers to cause a denial of service by sending a large number of spoofed IP packet CVE-2001-01837.5ipfw and ip6fw in FreeBSD 4.2 and earlier allows remote attackers to bypass access restrictions by setting the ECE flag in a TCP packet, whi CVE-2001-01842.6eEye Iris 1.01 beta allows remote attackers to cause a denial of service via a malformed packet, which causes Iris to crash when a user view CVE-2001-01855.0Netopia R9100 router version 4.6 allows authenticated users to cause a denial of service by using the router's telnet program to connect to