Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2001-0554

Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.

Published

2001-08-14T04:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

10.0

Impact Score

10.0

Weaknesses

Type: Primary
CWE-120

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	mit	kerberos	1.0	Yes
Application	mit	kerberos_5	1.1	Yes
Application	mit	kerberos_5	1.1.1	Yes
Application	mit	kerberos_5	1.2	Yes
Application	mit	kerberos_5	1.2.1	Yes
Application	mit	kerberos_5	1.2.2	Yes
Application	netkit	linux_netkit	0.10	Yes
Application	netkit	linux_netkit	0.11	Yes
Application	netkit	linux_netkit	0.12	Yes
Operating System	sgi	irix	6.5	Yes
Operating System	freebsd	freebsd	2.0	Yes
Operating System	freebsd	freebsd	2.0.1	Yes
Operating System	freebsd	freebsd	2.0.5	Yes
Operating System	freebsd	freebsd	2.1	Yes
Operating System	freebsd	freebsd	2.1.0	Yes
Operating System	freebsd	freebsd	2.1.5	Yes
Operating System	freebsd	freebsd	2.1.6	Yes
Operating System	freebsd	freebsd	2.1.6.1	Yes
Operating System	freebsd	freebsd	2.1.7	Yes
Operating System	freebsd	freebsd	2.1.7.1	Yes
Operating System	freebsd	freebsd	2.2	Yes
Operating System	freebsd	freebsd	2.2	Yes
Operating System	freebsd	freebsd	2.2.1	Yes
Operating System	freebsd	freebsd	2.2.2	Yes
Operating System	freebsd	freebsd	2.2.3	Yes
Operating System	freebsd	freebsd	2.2.4	Yes
Operating System	freebsd	freebsd	2.2.5	Yes
Operating System	freebsd	freebsd	2.2.6	Yes
Operating System	freebsd	freebsd	2.2.7	Yes
Operating System	freebsd	freebsd	2.2.8	Yes
Operating System	freebsd	freebsd	3.0	Yes
Operating System	freebsd	freebsd	3.0	Yes
Operating System	freebsd	freebsd	3.1	Yes
Operating System	freebsd	freebsd	3.2	Yes
Operating System	freebsd	freebsd	3.3	Yes
Operating System	freebsd	freebsd	3.4	Yes
Operating System	freebsd	freebsd	3.5	Yes
Operating System	freebsd	freebsd	3.5	Yes
Operating System	freebsd	freebsd	3.5.1	Yes
Operating System	freebsd	freebsd	3.5.1	Yes
Operating System	freebsd	freebsd	3.5.1	Yes
Operating System	freebsd	freebsd	4.0	Yes
Operating System	freebsd	freebsd	4.0	Yes
Operating System	freebsd	freebsd	4.0	Yes
Operating System	freebsd	freebsd	4.1	Yes
Operating System	freebsd	freebsd	4.1.1	Yes
Operating System	freebsd	freebsd	4.2	Yes
Operating System	freebsd	freebsd	4.3	Yes
Operating System	ibm	aix	4.3	Yes
Operating System	ibm	aix	4.3.1	Yes
Operating System	ibm	aix	4.3.2	Yes
Operating System	ibm	aix	4.3.3	Yes
Operating System	ibm	aix	5.1	Yes
Operating System	netbsd	netbsd	1.0	Yes
Operating System	netbsd	netbsd	1.1	Yes
Operating System	netbsd	netbsd	1.2	Yes
Operating System	netbsd	netbsd	1.2.1	Yes
Operating System	netbsd	netbsd	1.3	Yes
Operating System	netbsd	netbsd	1.3.1	Yes
Operating System	netbsd	netbsd	1.3.2	Yes
Operating System	netbsd	netbsd	1.3.3	Yes
Operating System	netbsd	netbsd	1.4	Yes
Operating System	netbsd	netbsd	1.4.1	Yes
Operating System	netbsd	netbsd	1.4.2	Yes
Operating System	netbsd	netbsd	1.4.3	Yes
Operating System	netbsd	netbsd	1.5	Yes
Operating System	netbsd	netbsd	1.5.1	Yes
Operating System	openbsd	openbsd	2.0	Yes
Operating System	openbsd	openbsd	2.1	Yes
Operating System	openbsd	openbsd	2.2	Yes
Operating System	openbsd	openbsd	2.3	Yes
Operating System	openbsd	openbsd	2.4	Yes
Operating System	openbsd	openbsd	2.5	Yes
Operating System	openbsd	openbsd	2.6	Yes
Operating System	openbsd	openbsd	2.7	Yes
Operating System	openbsd	openbsd	2.8	Yes
Operating System	sun	solaris	2.6	Yes
Operating System	sun	sunos	5.0	Yes
Operating System	sun	sunos	5.1	Yes
Operating System	sun	sunos	5.2	Yes
Operating System	sun	sunos	5.3	Yes
Operating System	sun	sunos	5.4	Yes
Operating System	sun	sunos	5.5	Yes
Operating System	sun	sunos	5.5.1	Yes
Operating System	sun	sunos	5.7	Yes
Operating System	sun	sunos	5.8	Yes
Operating System	debian	debian_linux	2.2	Yes

References

ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:49.telnetd.asc Broken Link, Patch, Vendor Advisory ([email protected])
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-012.txt.asc Broken Link ([email protected])
ftp://patches.sgi.com/support/free/security/advisories/20010801-01-P Broken Link ([email protected])
ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.10/CSSA-2001-SCO.10.txt Broken Link ([email protected])
http://archives.neohapsis.com/archives/hp/2001-q4/0014.html Broken Link ([email protected])
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000413 Broken Link ([email protected])
http://ftp.support.compaq.com/patches/.new/html/SSRT0745U.shtml Broken Link ([email protected])
http://online.securityfocus.com/advisories/3476 Broken Link, Third Party Advisory, VDB Entry ([email protected])
http://online.securityfocus.com/archive/1/199496 Broken Link, Third Party Advisory, VDB Entry ([email protected])
http://online.securityfocus.com/archive/1/199541 Broken Link, Third Party Advisory, VDB Entry ([email protected])
http://online.securityfocus.com/archive/1/203000 Broken Link, Third Party Advisory, VDB Entry ([email protected])
http://www.calderasystems.com/support/security/advisories/CSSA-2001-030.0.txt Broken Link ([email protected])
http://www.cert.org/advisories/CA-2001-21.html Patch, Third Party Advisory, US Government Resource ([email protected])
http://www.ciac.org/ciac/bulletins/l-131.shtml Broken Link ([email protected])
http://www.cisco.com/warp/public/707/catos-telrcv-vuln-pub.shtml Third Party Advisory ([email protected])
http://www.debian.org/security/2001/dsa-070 Third Party Advisory ([email protected])
http://www.debian.org/security/2001/dsa-075 Third Party Advisory ([email protected])
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-068.php3 Broken Link ([email protected])
http://www.novell.com/linux/security/advisories/2001_029_nkitb_txt.html Broken Link ([email protected])
http://www.osvdb.org/809 Broken Link ([email protected])
http://www.redhat.com/support/errata/RHSA-2001-099.html Third Party Advisory ([email protected])
http://www.redhat.com/support/errata/RHSA-2001-100.html Third Party Advisory ([email protected])
http://www.securityfocus.com/archive/1/197804 Exploit, Third Party Advisory, VDB Entry, Vendor Advisory ([email protected])
http://www.securityfocus.com/bid/3064 Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/6875 Third Party Advisory, VDB Entry ([email protected])
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:49.telnetd.asc Broken Link, Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-012.txt.asc Broken Link (af854a3a-2127-422b-91ae-364da2661108)
ftp://patches.sgi.com/support/free/security/advisories/20010801-01-P Broken Link (af854a3a-2127-422b-91ae-364da2661108)
ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.10/CSSA-2001-SCO.10.txt Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://archives.neohapsis.com/archives/hp/2001-q4/0014.html Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000413 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://ftp.support.compaq.com/patches/.new/html/SSRT0745U.shtml Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://online.securityfocus.com/advisories/3476 Broken Link, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://online.securityfocus.com/archive/1/199496 Broken Link, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://online.securityfocus.com/archive/1/199541 Broken Link, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://online.securityfocus.com/archive/1/203000 Broken Link, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.calderasystems.com/support/security/advisories/CSSA-2001-030.0.txt Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://www.cert.org/advisories/CA-2001-21.html Patch, Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.ciac.org/ciac/bulletins/l-131.shtml Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://www.cisco.com/warp/public/707/catos-telrcv-vuln-pub.shtml Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2001/dsa-070 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2001/dsa-075 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-068.php3 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://www.novell.com/linux/security/advisories/2001_029_nkitb_txt.html Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://www.osvdb.org/809 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2001-099.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2001-100.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/197804 Exploit, Third Party Advisory, VDB Entry, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/3064 Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/6875 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)