Vulnerability Report

CVE-2001-0797

RCE

Title: login buffer overflow via large number of arguments

RCE

Proof Of Concept

PoC Available for CVE-2001-0797

CWE Category NVD-CWE-noinfo
Published Date Dec 12, 2001
Modified Date Apr 03, 2025
Exploit Status Available
Score 10.0 CVSS v2.0
Exploit Probability (EPSS)
84.08%

Vulnerability Summary

CVE-2001-0797: Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.

Impacted Vendors

S
sco 1
S
sgi 1
H
hp 1
I
ibm 1
O
oracle 2
C
caldera 1
S
sun 2

Reference Links

ftp://patches.sgi.com/support/free/security/advisories/20011201-01-I ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.40/CSSA-2001-SCO.40.txt http://marc.info/?l=bugtraq&m=100844757228307&w=2 http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/213 http://www-1.ibm.com/support/search.wss?rs=0&q=IY26221&apar=only http://www.cert.org/advisories/CA-2001-34.html http://www.kb.cert.org/vuls/id/569272 http://www.securityfocus.com/archive/1/246487 http://www.securityfocus.com/bid/3681 http://xforce.iss.net/alerts/advise105.php https://exchange.xforce.ibmcloud.com/vulnerabilities/7284 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2025 ftp://patches.sgi.com/support/free/security/advisories/20011201-01-I ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.40/CSSA-2001-SCO.40.txt http://marc.info/?l=bugtraq&m=100844757228307&w=2 http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/213 http://www-1.ibm.com/support/search.wss?rs=0&q=IY26221&apar=only http://www.cert.org/advisories/CA-2001-34.html http://www.kb.cert.org/vuls/id/569272 http://www.securityfocus.com/archive/1/246487 http://www.securityfocus.com/bid/3681 http://xforce.iss.net/alerts/advise105.php https://exchange.xforce.ibmcloud.com/vulnerabilities/7284 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2025
CVSS v2.0
Source Entity [email protected]
Severity HIGH
10.0
Access Vector
N/A
Authentication
N/A
RAW VECTOR AV:N/AC:L/Au:N/C:C/I:C/A:C

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2001-0797 Exploits & PoCs (Proof Of Concept)

Exploit-DB https://www.exploit-db.com/exploits/16928
View Code
Exploit-DB https://www.exploit-db.com/exploits/346
View Code
Exploit-DB https://www.exploit-db.com/exploits/716
View Code
Exploit-DB https://www.exploit-db.com/exploits/57
View Code
Exploit-DB https://www.exploit-db.com/exploits/21179
View Code
Exploit-DB https://www.exploit-db.com/exploits/9917
View Code
Exploit-DB https://www.exploit-db.com/exploits/16327
View Code
Exploit-DB https://www.exploit-db.com/exploits/10036
View Code
MODIFIED

Vulnerability data or affected products updated.

PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A
Complexity N/A
Privileges N/A
Interaction NONE
CVSS Vector String AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected Stack

No specific products linked.