National Vulnerability Database (CVE-2001-0053)

National Cyber-Alert System Vulnerability Summary: CVE-2001-0053
Orirignal release date: 2001-02-12 Source: US-CERT/NIST ### Overview One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges. ### Impact CVSS Severity: 10 (High) Range: remote Authentication: input buffer="1" Impact Type: sec_prot admin="1" ### Reference to Advisories, Solutions, and Tools External Source: Security Focus Name: bid 2124 Hyperlink: http://www.securityfocus.com/bid/2124 External Source: ISS X-Force Name: bsd-ftpd-replydirname-bo(5776) Hyperlink: http://xforce.iss.net/static/5776.php External Source: Bugtraq Name: BUGTRAQ:20001218 Trustix Security Advisory - ed Hyperlink: http://archives.neohapsis.com/archives/bugtraq/2000-12/0275.html External Source: tcsh Name: Hyperlink: External Source: and ftpd-BSD Name: Hyperlink: External Source: OpenBSD Name: OPENBSD:20001218 Hyperlink: http://www.openbsd.org/advisories/ftpd_replydirname.txt ### Vulnerable Software and Vendor OpenBSD (OpenBSD) ftpd-BSD (David Madore) NetBSD (NetBSD) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0053