CVE-2001-1579 The timed program (in.timed) in UnixWare 7 and OpenUnix 8.0.0 does not properly terminate certain strings with a null, which allows remote attackers to cause a denial of service.
MediumCVSS 5.0
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The timed program (in.timed) in UnixWare 7 and OpenUnix 8.0.0 does not properly terminate certain strings with a null, which allows remote attackers to cause a denial of service.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sco open unix | = 8.0.0 | No fix listed |
| sco unixware | = 7 | No fix listed |
References
- CSSA-2001-SCO.39 patch vendor-advisory