CVE-2001-0421: Medium severity Sun Solaris vulnerability
FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readable permissions, by providing a valid username with an invalid password followed by a CWD ~ command, which could release sensitive information such as shadowed passwords, or fill the disk partition.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2001-0421?
CVE-2001-0421 is considered a high severity vulnerability due to the potential exposure of sensitive information.
How do I fix CVE-2001-0421?
To fix CVE-2001-0421, users should upgrade to an updated version of Solaris that addresses this vulnerability.
Who is affected by CVE-2001-0421?
CVE-2001-0421 affects users running Solaris 8 and earlier versions, including specific variants of SunOS.
What type of attacks can exploit CVE-2001-0421?
CVE-2001-0421 can be exploited by local and remote attackers attempting to cause a core dump in the root directory.
What information can be leaked due to CVE-2001-0421?
CVE-2001-0421 may lead to the exposure of sensitive information, potentially including shadowed password files.