CVE-2001-0181

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Format string vulnerability in the error logging code of DHCP server and client in Caldera Linux allows remote attackers to execute arbitrary commands.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.calderasystems.com/support/security/advisories/CSSA-2001-003.0.txtPatch, Vendor Advisory
http://www.securityfocus.com/bid/2215Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5953
http://www.calderasystems.com/support/security/advisories/CSSA-2001-003.0.txtPatch, Vendor Advisory
http://www.securityfocus.com/bid/2215Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5953

Timeline

Published: Mar 26, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-01825.0FireWall-1 4.1 with a limited-IP license allows remote attackers to cause a denial of service by sending a large number of spoofed IP packet CVE-2001-01837.5ipfw and ip6fw in FreeBSD 4.2 and earlier allows remote attackers to bypass access restrictions by setting the ECE flag in a TCP packet, whi CVE-2001-01842.6eEye Iris 1.01 beta allows remote attackers to cause a denial of service via a malformed packet, which causes Iris to crash when a user view CVE-2001-01855.0Netopia R9100 router version 4.6 allows authenticated users to cause a denial of service by using the router's telnet program to connect to CVE-2001-01865.0Directory traversal vulnerability in Free Java Web Server 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2001-018710.0Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary CVE-2001-01885.0GoodTech FTP server 3.0.1.2.1.0 and earlier allows remote attackers to cause a denial of service via a flood of connections to the server, w CVE-2001-01895.0Directory traversal vulnerability in LocalWEB2000 HTTP server allows remote attackers to read arbitrary commands via a .. (dot dot) attack i CVE-2001-01907.2Buffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, and possibly other operating systems, allows local users to gain privileges by ex CVE-2001-019110.0gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COOKIE cookie, which all CVE-2001-019210.0Buffer overflows in CTRLServer in XMail allows attackers to execute arbitrary commands via the cfgfileget or domaindel functions.CVE-2001-01937.2Format string vulnerability in man in some Linux distributions allows local users to gain privileges via a malformed -l parameter.