CVE-2001-0085: Buffer Overflow

Published Feb 12, 2001

Updated

Buffer overflow in Kermit communications software in HP-UX 11.0 and earlier allows local users to cause a denial of service and possibly execute arbitrary commands.

Affected Software

4 affected components

HPE HP-UX=10.01

HPE HP-UX=11.00

HPE HP-UX=10.20

HPE HP-UX=10.10

Remediation

Patch Available

http://www.securityfocus.com/bid/2170

Event History

Feb 12, 2001

CVE Published

05:00 AM

May 7, 2001

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0085?

CVE-2001-0085 is considered critical due to its potential for local users to exploit a buffer overflow, leading to denial of service or arbitrary code execution.

How do I fix CVE-2001-0085?

To resolve CVE-2001-0085, upgrade to a patched version of HP-UX that addresses this buffer overflow vulnerability.

What versions of HP-UX are affected by CVE-2001-0085?

CVE-2001-0085 affects HP-UX versions 10.01, 10.10, 10.20, and 11.00.

Can remote users exploit CVE-2001-0085?

CVE-2001-0085 is primarily a local privilege escalation vulnerability, meaning it requires local access to the system for exploitation.

What are the potential consequences of CVE-2001-0085?

The potential consequences of CVE-2001-0085 include system crashes, denial of service, and unauthorized execution of arbitrary commands.