CVE-2001-0284

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Buffer overflow in IPSEC authentication mechanism for OpenBSD 2.8 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a malformed Authentication header (AH) IPv4 option.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
May 3, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-028510.0Buffer overflow in A1 HTTP server 1.0a allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a loCVE-2001-02865.0Directory traversal vulnerability in A1 HTTP server 1.0a allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET rCVE-2001-02872.1VERITAS Cluster Server (VCS) 1.3.0 on Solaris allows local users to cause a denial of service (system panic) via the -L option to the lltstaCVE-2001-02887.5Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackeCVE-2001-02894.6Joe text editor 2.8 searches the current working directory (CWD) for the .joerc configuration file, which could allow local users to gain prCVE-2001-02904.6Vulnerability in Mailman 2.0.1 and earlier allows list administrators to obtain user passwords.CVE-2001-029110.0Buffer overflow in post-query sample CGI program allows remote attackers to execute arbitrary commands via an HTTP POST request that containCVE-2001-02927.5PHP-Nuke 4.4.1a allows remote attackers to modify a user's email address and obtain the password by guessing the user id (UID) and calling uCVE-2001-02935.0Directory traversal vulnerability in FtpXQ FTP server 2.0.93 allows remote attackers to read arbitrary files via a .. (dot dot) in the GET cCVE-2001-02945.0Directory traversal vulnerability in TYPSoft FTP Server 0.85 allows remote attackers to read arbitrary files via (1) a .. (dot dot) in a GETCVE-2001-02955.0Directory traversal vulnerability in War FTP 1.67.04 allows remote attackers to list directory contents and possibly read files via a "dir *CVE-2001-029610.0Buffer overflow in WFTPD Pro 3.00 allows remote attackers to execute arbitrary commands via a long CWD command.
CVE-2001-0284: Critical severity, CVSS 10.0 | Vulnix