CVE-2001-0993

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

sendmsg function in NetBSD 1.3 through 1.5 allows local users to cause a denial of service (kernel trap or panic) via a msghdr structure with a large msg_controllen length.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/netbsd/2001-q3/0102.htmlPatch, Vendor Advisory
http://www.osvdb.org/1910
http://www.securityfocus.com/bid/3088Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6908
http://archives.neohapsis.com/archives/netbsd/2001-q3/0102.htmlPatch, Vendor Advisory
http://www.osvdb.org/1910
http://www.securityfocus.com/bid/3088Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6908

Timeline

Published: Jul 24, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-09945.0Marconi ForeThought 7.1 allows remote attackers to cause a denial of service by causing both telnet sessions to be locked via unusual input CVE-2001-09957.5PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to P CVE-2001-09966.4POP3Lite before 0.2.4 does not properly quote a . (dot) in an email message, which could allow a remote attacker to append arbitrary text to CVE-2001-09977.5Textor Webmasters Ltd listrec.pl CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the TEMPLATE CVE-2001-09985.0IBM HACMP 4.4 allows remote attackers to cause a denial of service via a completed TCP connection to HACMP ports (e.g., using a port scan) t CVE-2001-09997.5Outlook Express 6.00 allows remote attackers to execute arbitrary script by embedding SCRIPT tags in a message whose MIME content type is te CVE-2001-10002.1rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to read arbitrary files v CVE-2001-10027.5The default configuration of the DVI print filter (dvips) in Red Hat Linux 7.0 and earlier does not run dvips in secure mode when dvips is e CVE-2001-10034.6Respondus 1.1.2 for WebCT uses weak encryption to remember usernames and passwords, which allows local users who can read the WEBCT.SVR file CVE-2001-10045.0Cross-site scripting (CSS) vulnerability in gnut Gnutella client before 0.4.27 allows remote attackers to execute arbitrary script on other CVE-2001-10057.5Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses weak encryption to store the user password in a registry key, which allows a CVE-2001-10065.0Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its password feature to res