CVE-2001-0797

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=100844757228307&w=2
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/213
http://www-1.ibm.com/support/search.wss?rs=0&q=IY26221&apar=only
http://www.cert.org/advisories/CA-2001-34.htmlPatch, Third Party Advisory, US Government Resource
http://www.kb.cert.org/vuls/id/569272US Government Resource
http://www.securityfocus.com/archive/1/246487Vendor Advisory
http://www.securityfocus.com/bid/3681Exploit, Patch, Vendor Advisory
http://xforce.iss.net/alerts/advise105.phpPatch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7284
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2025
http://marc.info/?l=bugtraq&m=100844757228307&w=2
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/213
http://www-1.ibm.com/support/search.wss?rs=0&q=IY26221&apar=only
http://www.cert.org/advisories/CA-2001-34.htmlPatch, Third Party Advisory, US Government Resource
http://www.kb.cert.org/vuls/id/569272US Government Resource
http://www.securityfocus.com/archive/1/246487Vendor Advisory
http://www.securityfocus.com/bid/3681Exploit, Patch, Vendor Advisory
http://xforce.iss.net/alerts/advise105.phpPatch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7284
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2025

Timeline

Published: Dec 12, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-079910.0Buffer overflows in lpsched in IRIX 6.5.13f and earlier allow remote attackers to execute arbitrary commands via a long argument.CVE-2001-080010.0lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.CVE-2001-08017.2lpstat in IRIX 6.5.13f and earlier allows local users to gain root privileges by specifying a Trojan Horse nettype shared library.CVE-2001-080310.0Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to exec CVE-2001-08045.0Directory traversal vulnerability in story.pl in Interactive Story 1.3 allows a remote attacker to read arbitrary files via a .. (dot dot) a CVE-2001-08055.0Directory traversal vulnerability in ttawebtop.cgi in Tarantella Enterprise 3.00 and 3.01 allows remote attackers to read arbitrary files vi CVE-2001-08063.6Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permissions for the Desktop CVE-2001-08072.6Internet Explorer 5.0, and possibly other versions, may allow remote attackers (malicious web pages) to read known text files from a client'CVE-2001-080810.0gnatsweb.pl in GNATS GnatsWeb 2.7 through 3.95 allows remote attackers to execute arbitrary commands via certain characters in the help_file CVE-2001-08092.1Vulnerability in CIFS/9000 Server (SAMBA) A.01.06 and earlier in HP-UX 11.0 and 11.11, when configured as a print server, allows local users CVE-2001-08157.5Buffer overflow in PerlIS.dll in Activestate ActivePerl 5.6.1.629 and earlier allows remote attackers to execute arbitrary code via an HTTP CVE-2001-08167.5OpenSSH before 2.9.9, when running sftp using sftp-server and using restricted keypairs, allows remote authenticated users to bypass authori