CVE-2001-0936

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in Frox transparent FTP proxy 0.6.6 and earlier, with the local caching method selected, allows remote FTP servers to run arbitrary code via a long response to an MDTM request.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://frox.sourceforge.net/security.txtVendor Advisory
http://marc.info/?l=bugtraq&m=100713367307799&w=2
http://www.securityfocus.com/bid/3606Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7632
http://frox.sourceforge.net/security.txtVendor Advisory
http://marc.info/?l=bugtraq&m=100713367307799&w=2
http://www.securityfocus.com/bid/3606Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7632

Timeline

Published: Nov 30, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-09377.5PGPMail.pl 1.31 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) recipient or (2) pgpuserid paramet CVE-2001-09386.4Directory traversal vulnerability in AspUpload 2.1, in certain configurations, allows remote attackers to upload and read arbitrary files, a CVE-2001-09395.0Lotus Domino 5.08 and earlier allows remote attackers to cause a denial of service (crash) via a SunRPC NULL command to port 443.CVE-2001-09407.5Buffer overflow in the GUI authentication code of Check Point VPN-1/FireWall-1 Management Server 4.0 and 4.1 allows remote attackers to exec CVE-2001-09414.6Buffer overflow in dbsnmp in Oracle 8.0.6 through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment vari CVE-2001-09424.6dbsnmp in Oracle 8.1.6 and 8.1.7 uses the ORACLE_HOME environment variable to find and execute the dbsnmp program, which allows local users CVE-2001-09437.2dbsnmp in Oracle 8.0.5 and 8.1.5, under certain conditions, trusts the PATH environment variable to find and execute the (1) chown or (2) ch CVE-2001-09447.2DDE in mIRC allows local users to launch applications under another user's account via a DDE message that executes a command, which may be e CVE-2001-09455.0Buffer overflow in Outlook Express 5.0 through 5.02 for Macintosh allows remote attackers to cause a denial of service via an e-mail message CVE-2001-09463.6apmscript in Apmd in Red Hat 7.2 "Enigma" allows local users to create or change the modification dates of arbitrary files via a symlink att CVE-2001-09477.5Forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to determine the real path CVE-2001-09487.5Cross-site scripting (CSS) vulnerability in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to exec