NetSight
IP …
critical10.0Public exploit code

CVE-2001-0554

Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options incl…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.

Affected products

VendorProductAffected versions
MitKerberos
Version 1.0
MitKerberos 5
Versions 1.1, 1.1.1, 1.2, 1.2.1, 1.2.2
NetkitLinux Netkit
Versions 0.10, 0.11, 0.12
SgiIrix
Version 6.5
FreebsdFreebsd
Versions 2.0, 2.0.1, 2.0.5, 2.1, 2.1.0, 2.1.5
IbmAix
Versions 4.3, 4.3.1, 4.3.2, 4.3.3, 5.1
NetbsdNetbsd
Versions 1.0, 1.1, 1.2, 1.2.1, 1.3, 1.3.1
OpenbsdOpenbsd
Versions 2.0, 2.1, 2.2, 2.3, 2.4, 2.5
SunSolaris
Version 2.6
SunSunos
Versions 5.0, 5.1, 5.2, 5.3, 5.4, 5.5
DebianDebian Linux
Version 2.2

Weakness classification

CWE-120

References