National Vulnerability Database (CVE-2001-0554)

National Cyber-Alert System Vulnerability Summary: CVE-2001-0554
Orirignal release date: 2001-08-14 Source: US-CERT/NIST ### Overview Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function. ### Impact CVSS Severity: 10 (High) Range: remote Authentication: input buffer="1" Impact Type: sec_prot admin="1" ### Reference to Advisories, Solutions, and Tools External Source: Security Focus Name: http://www.securityfocus.com/archive/1/197804 adv=1 Hyperlink: http://www.securityfocus.com/archive/1/197804 adv=1 External Source: CERT Name: CA-2001-21 Hyperlink: http://www.cert.org/advisories/CA-2001-21.html External Source: FreeBSD Name: FreeBSD-SA-01:49 Hyperlink: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:49.telnetd.asc External Source: Security Focus Name: bugtraq id 3064 Hyperlink: http://www.securityfocus.com/bid/3064 ### Vulnerable Software and Vendor Solaris (Sun) Linux Netkit (Netkit) AIX (IBM) Kerberos 5 (MIT) IRIX (SGI) FreeBSD (FreeBSD) OpenBSD (OpenBSD) NetBSD (NetBSD) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0554