high7.2Public exploit code
CVE-2001-0735
Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARSING option enabled allows local users to execute arbitrary code via a long line in the .n…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- cfingerd 1.4.1/1.4.2/1.4.3 Utilities - Local Buffer Overflow (3)2001-07-10 · local · unix · Verified
- cfingerd 1.4.1/1.4.2/1.4.3 Utilities - Local Buffer Overflow (2)2001-07-11 · local · unix · Verified
- cfingerd 1.4.1/1.4.2/1.4.3 Utilities - Local Buffer Overflow (1)2001-06-21 · local · unix · Verified
Impact
Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Infodrom | Cfingerd | Versions 1.4.1, 1.4.2, 1.4.3 |
References
- NVD record
- CVE.org record
- http://www.debian.org/security/2001/dsa-066
- http://www.securityfocus.com/archive/1/01071120191900.00788%40localhost.localdomain
- http://www.securityfocus.com/archive/1/192844
- http://www.securityfocus.com/bid/2914
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6744
- http://www.debian.org/security/2001/dsa-066
- http://www.securityfocus.com/archive/1/01071120191900.00788%40localhost.localdomain
- http://www.securityfocus.com/archive/1/192844
- http://www.securityfocus.com/bid/2914
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6744