CVE-2001-1484

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Alcatel ADSL modems allow remote attackers to access the Trivial File Transfer Protocol (TFTP) to modify firmware and configuration via a bounce attack from a system on the local area network (LAN) side, which is allowed to access TFTP without authentication.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.cert.org/advisories/CA-2001-08.htmlThird Party Advisory, US Government Resource
http://www.kb.cert.org/vuls/id/211736Third Party Advisory, US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/6336
http://www.cert.org/advisories/CA-2001-08.htmlThird Party Advisory, US Government Resource
http://www.kb.cert.org/vuls/id/211736Third Party Advisory, US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/6336

Timeline

Published: Dec 31, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-14874.6popauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary files and execute commands as the pop user via CVE-2001-14885.0Open Projects Network Internet Relay Chat (IRC) daemon u2.10.05.18 does not perform a double-reverse DNS lookup, which allows remote attacke CVE-2001-14895.0Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a l CVE-2001-14905.0Mozilla 0.9.6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of i CVE-2001-14915.0Opera 5.11 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of imag CVE-2001-14945.5script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescr CVE-2001-14957.5network_query.php in Network Query Tool 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the target par CVE-2001-14969.8Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of servic CVE-2001-14972.1Microsoft Internet Explorer 4.0 through 6.0 could allow local users to differentiate between alphanumeric and non-alphanumeric characters us CVE-2001-14987.2Buffer overflow in mod_bf 0.2 allows local users to execute arbitrary commands via a long script.CVE-2001-14995.0Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on CVE-2001-15007.5ProFTPD 1.2.2rc2, and possibly other versions, does not properly verify reverse-resolved hostnames by performing forward resolution, which a