vulnwire
10.0crit

CVE-2001-0797in critical feed8 exploits

Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large numb…

Published 24 y ago · modified 4 mo ago · JSON

CVSS
10.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
95.0%
percentile 100%
Public exploits
8
Exploit-DB

Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.

Exploit prediction (EPSS)

95.00% probability of exploitation in the next 30 days, higher than 100% of all scored CVEs.

Exploits and detections

  • EDB-9917 Solaris TelnetD - 'TTYPROMPT' Remote Buffer Overflow (1) (Metasploit) · remote · 2002-01-18
  • EDB-716 Solaris 2.5.1/2.6/7/8 rlogin (SPARC) - '/bin/login' Remote Buffer Overflow · remote · 2004-12-24
  • EDB-57 Solaris 2.6/7/8 - 'TTYPROMPT in.telnet' Remote Authentication Bypass · remote · 2002-11-02
  • EDB-346 Solaris /bin/login (SPARC/x86) - Remote Code Execution · remote · 2001-12-20
  • EDB-21179 Solaris 2.x/7.0/8 - Derived 'login' Remote Buffer Overflow · remote · 2003-01-09
  • EDB-16928 System V Derived /bin/login - Extraneous Arguments Buffer Overflow (Metasploit) · remote · 2010-07-03
  • EDB-16327 Solaris TelnetD - 'TTYPROMPT' Remote Buffer Overflow (2) (Metasploit) · remote · 2010-06-22
  • EDB-10036 System V Derived /bin/login - Extraneous Arguments Buffer Overflow (modem based) (Metasploit) · remote · 2001-12-12

CVSS scores

Assigned byVersionScoreVector
NVD2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

References

  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2025 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • cert.org /advisories/CA-2001-34.html · third-party-advisory, x_refsource_CERT, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/7284 · vdb-entry, x_refsource_XF, x_transferred
  • www-1.ibm.com /support/search.wss?rs=0&q=IY26221&apar=only · vendor-advisory, x_refsource_AIXAPAR, x_transferred
  • marc.info /?l=bugtraq&m=100844757228307&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /archive/1/246487 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /bid/3681 · vdb-entry, x_refsource_BID, x_transferred
  • xforce.iss.net /alerts/advise105.php · third-party-advisory, x_refsource_ISS, x_transferred
  • kb.cert.org /vuls/id/569272 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • sunsolve.sun.com /pub-cgi/retrieve.pl?doctype=coll&doc=secbull/213 · vendor-advisory, x_refsource_SUN, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.