CVE-2001-0920

MediumCVSS 6.2/10Last modified Jun 16, 2026

Description

Format string vulnerability in auto nice daemon (AND) 1.0.4 and earlier allows a local user to possibly execute arbitrary code via a process name containing a format string.

Metrics

CVSS 2.0 6.2/10AV:L/AC:H/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://and.sourceforge.net/Vendor Advisory
http://marc.info/?l=bugtraq&m=100680319004162&w=2
http://www.securityfocus.com/bid/3580Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7606
http://and.sourceforge.net/Vendor Advisory
http://marc.info/?l=bugtraq&m=100680319004162&w=2
http://www.securityfocus.com/bid/3580Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7606

Timeline

Published: Nov 26, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-09212.1Netscape 4.79 and earlier for MacOS allows an attacker with access to the browser to obtain passwords from form fields by printing the docum CVE-2001-09227.5ndcgi.exe in Netdynamics 4.x through 5.x, and possibly earlier versions, allows remote attackers to steal session IDs and hijack user sessio CVE-2001-09237.2RPM Package Manager 4.0.x through 4.0.2.x allows an attacker to execute arbitrary code via corrupted data in the RPM file when the file is q CVE-2001-09245.0Directory traversal vulnerability in ifx CGI program in Informix Web DataBlade allows remote attackers to read arbitrary files via a .. (dot CVE-2001-09255.0The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via an CVE-2001-09265.0SSIFilter in Allaire JRun 3.1, 3.0 and 2.3.3 allows remote attackers to obtain source code for Java server pages (.jsp) and other files in t CVE-2001-09277.5Format string vulnerability in the permitted function of GNOME libgtop_daemon in libgtop 1.0.12 and earlier allows remote attackers to execu CVE-2001-09287.5Buffer overflow in the permitted function of GNOME gtop daemon (libgtop_daemon) in libgtop 1.0.13 and earlier may allow remote attackers to CVE-2001-09297.5Cisco IOS Firewall Feature set, aka Context Based Access Control (CBAC) or Cisco Secure Integrated Software, for IOS 11.2P through 12.2T doe CVE-2001-09307.5Sendpage.pl allows remote attackers to execute arbitrary commands via a message containing shell metacharacters.CVE-2001-09317.5Directory traversal vulnerability in Cooolsoft PowerFTP Server 2.03 allows attackers to list or read arbitrary files and directories via a .CVE-2001-09327.5Buffer overflow in Cooolsoft PowerFTP Server 2.03 allows remote attackers to cause a denial of service and possibly execute arbitrary code v