CVE-2001-0456

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

postinst installation script for Proftpd in Debian 2.2 does not properly change the "run as uid/gid root" configuration when the user enables anonymous access, which causes the server to run at a higher privilege than intended.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Jun 27, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-04575.0man2html before 1.5-22 allows remote attackers to cause a denial of service (memory exhaustion).CVE-2001-04587.5Multiple buffer overflows in ePerl before 2.2.14-0.7 allow local and remote attackers to execute arbitrary commands.CVE-2001-04597.2Buffer overflows in ascdc Afterstep while running setuid allows local users to gain root privileges via a long (1) -d option, (2) -m option,CVE-2001-04605.0Websweeper 4.0 does not limit the length of certain HTTP headers, which allows remote attackers to cause a denial of service (memory exhaustCVE-2001-04617.5template.cgi in Free On-Line Dictionary of Computing (FOLDOC) allows remote attackers to read files and execute commands via shell metacharaCVE-2001-04625.0Directory traversal vulnerability in Perl web server 0.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in tCVE-2001-04635.0Directory traversal vulnerability in cal_make.pl in PerlCal allows remote attackers to read arbitrary files via a .. (dot dot) in the p0 parCVE-2001-046410.0Buffer overflow in websync.exe in Cyberscheduler allows remote attackers to execute arbitrary commands via a long tzs (timezone) parameter.CVE-2001-04654.6TurboTax saves passwords in a temporary file when a user imports investment tax information from a financial institution, which could allow CVE-2001-04665.0Directory traversal vulnerability in ustorekeeper 1.61 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameCVE-2001-04675.0Directory traversal vulnerability in RobTex Viking Web server before 1.07-381 allows remote attackers to read arbitrary files via a \... (moCVE-2001-04687.2Buffer overflow in FTPFS allows local users to gain root privileges via a long user name.
CVE-2001-0456: High severity, CVSS 7.5 | Vulnix