CVE-2001-0735

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.debian.org/security/2001/dsa-066Patch, Vendor Advisory
http://www.securityfocus.com/archive/1/01071120191900.00788%40localhost.localdomain
http://www.securityfocus.com/archive/1/192844Patch, Vendor Advisory
http://www.securityfocus.com/bid/2914Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6744
http://www.debian.org/security/2001/dsa-066Patch, Vendor Advisory
http://www.securityfocus.com/archive/1/01071120191900.00788%40localhost.localdomain
http://www.securityfocus.com/archive/1/192844Patch, Vendor Advisory
http://www.securityfocus.com/bid/2914Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6744

Timeline

Published: Oct 18, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-07362.1Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary fil CVE-2001-07377.5A long 'synch' delay in Logitech wireless mice and keyboard receivers allows a remote attacker to hijack connections via a man-in-the-middle CVE-2001-07385.0LogLine function in klogd in sysklogd 1.3 in various Linux distributions allows an attacker to cause a denial of service (hang) by causing n CVE-2001-07397.2Guardian Digital WebTool in EnGarde Secure Linux 1.0.1 allows restarted services to inherit some environmental variables, which could allow CVE-2001-07405.03COM OfficeConnect 812 and 840 ADSL Router 4.2, running OCR812 router software 1.1.9 and earlier, allows remote attackers to cause a denial CVE-2001-07412.1Cisco Hot Standby Routing Protocol (HSRP) allows local attackers to cause a denial of service by spoofing HSRP packets.CVE-2001-07427.5Buffer overflow in Computalynx CMail POP3 mail server 2.4.9 allows remote attackers to run arbitrary code via a long HELO command.CVE-2001-07435.0Paging function in O'Reilly WebBoard Pager 4.10 allows remote attackers to cause a denial of service via a message with an escaped ' charact CVE-2001-07442.1Horde IMP 2.2.4 and earlier allows local users to overwrite files via a symlink attack on a temporary file.CVE-2001-07455.0Netscape 4.7x allows remote attackers to obtain sensitive information such as the user's login, mailbox location and installation path via J CVE-2001-074610.0Buffer overflow in Web Publisher in iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to cause a denial of servi CVE-2001-07477.5Buffer overflow in iPlanet Web Server (iWS) Enterprise Edition 4.1, service packs 3 through 7, allows remote attackers to cause a denial of