CVE-2001-0609

CriticalCVSS 9.8/10Last modified Jun 16, 2026

Description

Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog function.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-193

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2001-04/0202.htmlBroken Link, Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/2576Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6364Third Party Advisory, VDB Entry
http://archives.neohapsis.com/archives/bugtraq/2001-04/0202.htmlBroken Link, Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/2576Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6364Third Party Advisory, VDB Entry

Timeline

Published: Aug 2, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-06104.6kfm as included with KDE 1.x can allow a local attacker to gain additional privileges via a symlink attack in the kfm cache directory in /tm CVE-2001-06117.5Becky! 2.00.05 and earlier can allow a remote attacker to gain additional privileges via a buffer overflow attack on long messages without n CVE-2001-06125.0McAfee Remote Desktop 3.0 and earlier allows remote attackers to cause a denial of service (crash) via a large number of packets to port 504 CVE-2001-06135.0Omnicron Technologies OmniHTTPD Professional 2.08 and earlier allows a remote attacker to create a denial of service via a long POST URL req CVE-2001-06147.5Carello E-Commerce 1.2.1 and earlier allows a remote attacker to gain additional privileges and execute arbitrary commands via a specially c CVE-2001-06155.0Directory traversal vulnerability in Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to read arbitrary fil CVE-2001-06165.0Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to create a denial of service via a URL request which incl CVE-2001-06177.5Allied Telesyn AT-AR220e cable/DSL router firmware 1.08a RC14 with the portmapper and the 'Virtual Server' enabled can allow a remote attack CVE-2001-06187.5Orinoco RG-1000 wireless Residential Gateway uses the last 5 digits of the 'Network Name' or SSID as the default Wired Equivalent Privacy (W CVE-2001-06197.5The Lucent Closed Network protocol can allow remote attackers to join Closed Network networks which they do not have access to. The 'Networ CVE-2001-06202.1iPlanet Calendar Server 5.0p2 and earlier allows a local attacker to gain access to the Netscape Admin Server (NAS) LDAP database and read a CVE-2001-06217.5The FTP server on Cisco Content Service 11000 series switches (CSS) before WebNS 4.01B23s and WebNS 4.10B13s allows an attacker who is an FT