First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2001-1577

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Unknown vulnerability in CDE in Caldera OpenUnix 7.1.0, 7.1.1, and 8.0 allows an xterm session to gain privileges when the session is reused.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/linux/caldera/2001-q4/0017.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/3646Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/7666
http://archives.neohapsis.com/archives/linux/caldera/2001-q4/0017.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/3646Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/7666

Timeline

Published: Dec 31, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-15782.1Unknown vulnerability in SCO OpenServer 5.0.6 and earlier allows local users to modify critical information such as certain CPU registers an CVE-2001-15795.0The timed program (in.timed) in UnixWare 7 and OpenUnix 8.0.0 does not properly terminate certain strings with a null, which allows remote a CVE-2001-15805.0Directory traversal vulnerability in ScriptEase viewcode.jse for Netware 5.1 before 5.1 SP3 allows remote attackers to read arbitrary files CVE-2001-15817.5The File Blocker feature in Clearswift MAILsweeper for SMTP 4.2 allows remote attackers to bypass e-mail attachment filtering policies via a CVE-2001-15827.2Buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAP CVE-2001-158310.0lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control CVE-2001-15847.5CardBoard 2.4 greeting card CGI by Michael Barretto allows remote attackers to execute arbitrary commands via shell metacharacters in the re CVE-2001-15856.8SSH protocol 2 (aka SSH-2) public key authentication in the development snapshot of OpenSSH 2.3.1, available from 2001-01-18 through 2001-02 CVE-2001-158610.0Directory traversal vulnerability in SimpleServer:WWW 1.13 and earlier allows remote attackers to execute arbitrary programs via encoded ../CVE-2001-15875.0NWFTPD.nlm before 5.01w in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (abend) via an anonymous ST CVE-2001-15932.1The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allo CVE-2001-159410.0GE Healthcare eNTEGRA P&R has a password of (1) entegra for the entegra user, (2) passme for the super user of the Polestar/Polestar-i Starl