CVE-2001-0249: Critical severity Sun SunOS vulnerability

Published May 24, 2001
·
Updated

Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to generate long strings.

Affected Software

10 affected components
Sun SunOS=5.3
Sun SunOS=5.7
Sun SunOS=5.5
Sun SunOS=5.8
Sun SunOS=5.4
Sun SunOS=5.5.1
Sun Solaris=2.6
HP HP-UX=11.00
Oracle Solaris=8
SGI IRIX>=6.5<=6.5.20

Event History

May 24, 2001
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2001-0249?

CVE-2001-0249 has a high severity level due to its potential for remote code execution through heap overflow in the FTP daemon.

2

How do I fix CVE-2001-0249?

To fix CVE-2001-0249, you should apply the appropriate patches provided by Sun/Oracle for affected versions of Solaris.

3

Which operating systems are affected by CVE-2001-0249?

CVE-2001-0249 affects multiple versions of Solaris, including 5.3, 5.4, 5.5, 5.7, 5.8, and Solaris 8.

4

Can CVE-2001-0249 be exploited remotely?

Yes, CVE-2001-0249 can be exploited remotely by sending specially crafted FTP LIST commands to the vulnerable server.

5

What type of vulnerability is CVE-2001-0249?

CVE-2001-0249 is classified as a heap overflow vulnerability, allowing attackers to execute arbitrary commands.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203