CVE-2001-0735

Опубликовано: 18 окт. 2001

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file.

Ссылки

http://www.debian.org/security/2001/dsa-066
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/01071120191900.00788%40localhost.localdomain
http://www.securityfocus.com/archive/1/192844
Patch
Vendor Advisory
http://www.securityfocus.com/bid/2914
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6744
http://www.debian.org/security/2001/dsa-066
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/01071120191900.00788%40localhost.localdomain
http://www.securityfocus.com/archive/1/192844
Patch
Vendor Advisory
http://www.securityfocus.com/bid/2914
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6744

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:infodrom:cfingerd:1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:infodrom:cfingerd:1.4.2:*:*:*:*:*:*:*

cpe:2.3:a:infodrom:cfingerd:1.4.3:*:*:*:*:*:*:*

EPSS

Процентиль: 43%

0.002

Низкий

7.2 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2001-0735

debian

больше 23 лет назад

Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARS ...

GHSA-j7gx-9mq3-49g8

github

около 3 лет назад