CVE-2001-0191 gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COOKIE cookie, which allows remote attackers to execute arbitrary commands via a buf...
HighCVSS 10.0
EPSS 5.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COOKIE cookie, which allows remote attackers to execute arbitrary commands via a buffer overflow, or brute force authentication by using a short cookie length.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| andynorman gnuserv | < 3.12 | 3.12 |
References
- 20010202 Remote vulnerability in gnuserv/XEmacs broken-link mailing-list patch vendor-advisory
- MDKSA-2001:019 broken-link patch vendor-advisory
- RHSA-2001:010 broken-link patch vendor-advisory
- RHSA-2001:011 broken-link patch vendor-advisory
- gnuserv-tcp-cookie-overflow(6056) third-party-advisory vdb-entry