CVE-2001-0248: Buffer Overflow
Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generate long strings.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2001-0248?
CVE-2001-0248 is rated as a high severity vulnerability due to its potential to allow remote attackers to execute arbitrary commands.
How do I fix CVE-2001-0248?
To fix CVE-2001-0248, apply the relevant patches from HPE for HP-UX or SGI for IRIX, and consider disabling the FTP service if not needed.
Which versions are affected by CVE-2001-0248?
CVE-2001-0248 affects HPUX versions 10.00, 10.10, 10.20, 10.30, and 11.00, as well as SGI IRIX versions 6.5, 6.5.1, and 6.5.2.
What can attackers do with CVE-2001-0248?
Attackers can exploit CVE-2001-0248 to execute arbitrary commands on affected systems due to a buffer overflow vulnerability.
Is CVE-2001-0248 related to FTP servers?
Yes, CVE-2001-0248 specifically affects the FTP server implementation in HP-UX and SGI IRIX, allowing exploitation through crafted commands.