CVE-2001-0053 One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges.
HighCVSS 10.0
EPSS 17.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| david madore ftpd-bsd | = 0.2.3 | No fix listed |
| netbsd | = 1.4 | No fix listed |
| netbsd | = 1.4.1 | No fix listed |
| netbsd | = 1.4.2 | No fix listed |
| netbsd | = 1.5 | No fix listed |
| OpenBSD | = 2.4 | No fix listed |
| OpenBSD | = 2.5 | No fix listed |
| OpenBSD | = 2.6 | No fix listed |
| OpenBSD | = 2.7 | No fix listed |
| OpenBSD | = 2.8 | No fix listed |
References
- 20001218 Trustix Security Advisory - ed, tcsh, and ftpd-BSD mailing-list patch
- 20001218 patch vendor-advisory
- 2124 exploit patch vdb-entry vendor-advisory
- bsd-ftpd-replydirname-bo(5776) vdb-entry