CVE-2001-1128

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Buffer overflow in Progress database 8.3D and 9.1C allows local users to execute arbitrary code via long entries in files that are specified by the (1) PROMSGS or (2) PROTERMCAP environment variables.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/archive/1/219174Vendor Advisory
http://www.securityfocus.com/bid/3414Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7264
http://www.securityfocus.com/archive/1/219174Vendor Advisory
http://www.securityfocus.com/bid/3414Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7264

Timeline

Published: Oct 8, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-11297.2Format string vulnerabilities in (1) _probuild, (2) _dbutil, (3) _mprosrv, (4) _mprshut, (5) _proapsv, (6) _progres, (7) _proutil, (8) _rfut CVE-2001-11307.5Sdbsearch.cgi in SuSE Linux 6.0-7.2 could allow remote attackers to execute arbitrary commands by uploading a keylist.txt file that contains CVE-2001-11315.0Directory traversal vulnerability in WhitSoft Development SlimFTPd 2.2 allows an attacker to read arbitrary files and directories via a ... CVE-2001-11327.5Mailman 2.0.x before 2.0.6 allows remote attackers to gain access to list administrative pages when there is an empty site or list password,CVE-2001-11332.1Vulnerability in a system call in BSDI 3.0 and 3.1 allows local users to cause a denial of service (reboot) in the kernel via a particular s CVE-2001-11345.0Xerox DocuPrint N40 Printers allow remote attackers to cause a denial of service via malformed data, such as that produced by the Code Red w CVE-2001-11357.5ZyXEL Prestige 642R and 642R-I routers do not filter the routers' Telnet and FTP ports on the external WAN interface from inside access, all CVE-2001-11362.1The libsecurity library in HP-UX 11.04 (VVOS) allows attackers to cause a denial of service.CVE-2001-11375.0D-Link DI-704 Internet Gateway firmware earlier than V2.56b6 allows remote attackers to cause a denial of service (reboot) via malformed IP CVE-2001-11387.5Directory traversal vulnerability in r.pl (aka r.cgi) of Randy Parker Power Up HTML 0.8033beta allows remote attackers to read arbitrary fil CVE-2001-11395.0Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. (dot dot) in CVE-2001-11405.0BadBlue Personal Edition v1.02 beta allows remote attackers to read source code for executable programs by appending a %00 (null byte) to th