CVE-2001-0850: Buffer Overflow

Published Dec 6, 2001

Updated

A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf functions, which could allow local or remote users to exploit those functions with a buffer overflow.

Affected Software

1 affected component

Caldera OpenLinux=3.1

Remediation

Patch Available

http://www.caldera.com/support/security/advisories/CSSA-2001-037.0.txt

Event History

Dec 6, 2001

CVE Published

05:00 AM

Mar 9, 2002

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0850?

CVE-2001-0850 is considered a high severity vulnerability due to the potential for remote exploitation through buffer overflow.

How do I fix CVE-2001-0850?

To mitigate CVE-2001-0850, upgrade to a secure version of the libdb1 package that does not use vulnerable versions of the snprintf and vsnprintf functions.

Who is affected by CVE-2001-0850?

Users of SCO OpenLinux 3.1 are affected by CVE-2001-0850 due to the insecure implementation of certain functions.

Can CVE-2001-0850 be exploited remotely?

Yes, CVE-2001-0850 can be exploited remotely if the vulnerable functions are exposed to untrusted input.

What are the consequences of exploiting CVE-2001-0850?

Exploiting CVE-2001-0850 can lead to arbitrary code execution on the affected system due to the buffer overflow vulnerability.