CVE-2001-1332

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflows in Linux CUPS before 1.1.6 may allow remote attackers to execute arbitrary code.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000384
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000386
http://lists2.suse.com/archive/suse-security-announce/2001-Mar/0000.htmlPatch, Vendor Advisory
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-048.php3Patch, Vendor Advisory
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000384
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000386
http://lists2.suse.com/archive/suse-security-announce/2001-Mar/0000.htmlPatch, Vendor Advisory
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-048.php3Patch, Vendor Advisory

Timeline

Published: May 10, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-13331.2Linux CUPS before 1.1.6 does not securely handle temporary files, possibly due to a symlink vulnerability that could allow local users to ov CVE-2001-13345.0Block_render_url.class in PHPSlash 0.6.1 allows remote attackers with PHPSlash administrator privileges to read arbitrary files by creating CVE-2001-13355.0Directory traversal vulnerability in CesarFTP 0.98b and earlier allows remote authenticated users (such as anonymous) to read arbitrary file CVE-2001-13367.5CesarFTP 0.98b and earlier stores usernames and passwords in plaintext in the settings.ini file, which allows attackers to gain privileges.CVE-2001-13375.0Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to cause a denial of service via a long HTTP request.CVE-2001-13385.0Beck IPC GmbH IPC@CHIP TelnetD server generates different responses when given valid and invalid login names, which allows remote attackers CVE-2001-13399.8Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered, which makes it eas CVE-2001-13405.0Beck GmbH IPC@Chip TelnetD service supports only one connection and does not disconnect a user who does not complete the login process, whic CVE-2001-13415.0The Beck GmbH IPC@Chip embedded web server installs the chipcfg.cgi program by default, which allows remote attackers to obtain sensitive ne CVE-2001-13425.0Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service (GPF) via an HTTP request for a URI th CVE-2001-13437.5ws_mail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code via shell metacharacter CVE-2001-13447.5WSSecurity.pl in WebStore allows remote attackers to bypass authentication by providing the program with a filename that exists, which is ma