Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2001-0191

Опубликовано: 03 мая 2001
Источник: nvd
CVSS2: 10
EPSS Низкий

Описание

gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COOKIE cookie, which allows remote attackers to execute arbitrary commands via a buffer overflow, or brute force authentication by using a short cookie length.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:andynorman:gnuserv:*:*:*:*:*:*:*:*
Версия до 3.12 (исключая)
cpe:2.3:a:gnu:xemacs:-:*:*:*:*:*:*:*

EPSS

Процентиль: 78%
0.01188
Низкий

10 Critical

CVSS2

Дефекты

CWE-120

Связанные уязвимости

redhat
больше 24 лет назад

gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COOKIE cookie, which allows remote attackers to execute arbitrary commands via a buffer overflow, or brute force authentication by using a short cookie length.

github
больше 3 лет назад

gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COOKIE cookie, which allows remote attackers to execute arbitrary commands via a buffer overflow, or brute force authentication by using a short cookie length.

EPSS

Процентиль: 78%
0.01188
Низкий

10 Critical

CVSS2

Дефекты

CWE-120