National Vulnerability Database (CVE-2001-0248)

National Cyber-Alert System Vulnerability Summary: CVE-2001-0248
Orirignal release date: 2001-06-18 Source: US-CERT/NIST ### Overview Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generate long strings. ### Impact CVSS Severity: 10 (High) Range: remote Authentication: input bound="1" Impact Type: sec_prot admin="1" ### Reference to Advisories, Solutions, and Tools External Source: Network Associates Name: NAI:20010409 Globbing Vulnerabilities in Multiple FTP Daemons Hyperlink: http://www.pgp.com/research/covert/advisories/048.asp External Source: CERT Name: CERT:CA-2001-07 Hyperlink: http://www.cert.org/advisories/CA-2001-07.html External Source: Security Focus Name: BID:2552 Hyperlink: http://www.securityfocus.com/bid/2552 External Source: NAI Name: 20010409 Globbing Vulnerabilities in Multiple FTP Daemons Hyperlink: http://www.nai.com/research/covert/advisories/048.asp External Source: XF Name: ftp-glob-expansion(6332) Hyperlink: http://xforce.iss.net/static/6332.php ### Vulnerable Software and Vendor HP-UX (HP) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0248