CVE-2001-0247: Buffer Overflow
Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) gopendir, (2) glstat, (3) gstat, and (4) the glob0 buffer as used in the glob functions glob2 and glob3.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2001-0247?
CVE-2001-0247 is considered a critical vulnerability due to the potential for remote code execution.
How do I fix CVE-2001-0247?
To remediate CVE-2001-0247, update all affected BSD-based FTP server versions to a patched release from the vendor.
Which systems are affected by CVE-2001-0247?
CVE-2001-0247 affects various versions of SGI IRIX, MIT Kerberos 5, FreeBSD, OpenBSD, and NetBSD.
What types of attacks are possible with CVE-2001-0247?
CVE-2001-0247 allows remote attackers to execute arbitrary commands on vulnerable systems.
Is CVE-2001-0247 still relevant in today's security landscape?
Yes, CVE-2001-0247 remains relevant as many legacy systems using affected BSD FTP servers are still in operation.