CVE-2001-0247

high · 10

Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2) g_lstat, (3) g_stat, and (4) the glob0 buffer as used in the glob functions glob2 and glob3.

CVSS

19.3%

EPSS (exploit prob.)

97th

EPSS percentile

2001-06-18

Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

Vendor	Product	Affected versions
mit	kerberos_5	1.1.1
mit	kerberos_5	1.2
mit	kerberos_5	1.2.1
mit	kerberos_5	1.2.2
sgi	irix	6.1
sgi	irix	6.5.1
sgi	irix	6.5.2m
sgi	irix	6.5.3
sgi	irix	6.5.3f
sgi	irix	6.5.3m
sgi	irix	6.5.4
sgi	irix	6.5.5
sgi	irix	6.5.6
sgi	irix	6.5.7
sgi	irix	6.5.8
sgi	irix	6.5.10
sgi	irix	6.5.11
freebsd	freebsd	2.2
freebsd	freebsd	2.2.2
freebsd	freebsd	2.2.3
freebsd	freebsd	2.2.4
freebsd	freebsd	2.2.5
freebsd	freebsd	2.2.6
freebsd	freebsd	2.2.8
freebsd	freebsd	3.0
freebsd	freebsd	3.1
freebsd	freebsd	3.2
freebsd	freebsd	3.3
freebsd	freebsd	3.4
freebsd	freebsd	3.5
freebsd	freebsd	3.5.1
freebsd	freebsd	4.0
freebsd	freebsd	4.1
freebsd	freebsd	4.1.1
freebsd	freebsd	4.2
netbsd	netbsd	1.2.1
netbsd	netbsd	1.3
netbsd	netbsd	1.3.1
netbsd	netbsd	1.3.2
netbsd	netbsd	1.3.3

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2001-0247