CVE-2001-0797
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 94.9%, higher than 100% of all known CVEs. Patch or mitigate before the next change window.
Description
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 94.92% probability · 100th percentile
- Public exploits
- 8 in Exploit-DB · verified · first 12 December 2001
- CISA KEV
- Not listed
- Affected
- sgi/irix · hp/hp-ux · ibm/aix · sco/openserver · sun/solaris · sun/sunos
- Source
- cve@mitre.org
EPSS 94.9% since 26 October 2026; no change recorded yet. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
Public exploits (8)
Entries in Exploit-DB that cite this CVE. Links go to the Exploit-DB page and to the file in the public repository; nothing is hosted here. A verified tick means the Exploit-DB team confirmed the exploit works against the stated version.
| EDB-ID | Title | Type | Published | Verified |
|---|---|---|---|---|
| EDB-16928source ↗ | System V Derived /bin/login - Extraneous Arguments Buffer Overflow (Metasploit)linux · Metasploit | remote | 3 July 2010 | yes |
| EDB-16327source ↗ | Solaris TelnetD - 'TTYPROMPT' Remote Buffer Overflow (2) (Metasploit)solaris · Metasploit | remote | 22 June 2010 | yes |
| EDB-716source ↗ | Solaris 2.5.1/2.6/7/8 rlogin (SPARC) - '/bin/login' Remote Buffer Overflowsolaris · Marco Ivaldi | remote | 24 December 2004 | yes |
| EDB-21179source ↗ | Solaris 2.x/7.0/8 - Derived 'login' Remote Buffer Overflowsolaris · snooq | remote | 9 January 2003 | yes |
| EDB-57source ↗ | Solaris 2.6/7/8 - 'TTYPROMPT in.telnet' Remote Authentication Bypasssolaris · Jonathan S. | remote | 2 November 2002 | yes |
| EDB-9917source ↗ | Solaris TelnetD - 'TTYPROMPT' Remote Buffer Overflow (1) (Metasploit)solaris · MC | remote | 18 January 2002 | yes |
| EDB-346source ↗ | Solaris /bin/login (SPARC/x86) - Remote Code Executionlinux_sparc · Teso | remote | 20 December 2001 | yes |
| EDB-10036source ↗ | System V Derived /bin/login - Extraneous Arguments Buffer Overflow (modem based) (Metasploit)solaris · I)ruid | remote | 12 December 2001 | yes |
References
- ftp://patches.sgi.com/support/free/security/advisories/20011201-01-I
- ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.40/CSSA-2001-SCO.40.txt
- http://marc.info/?l=bugtraq&m=100844757228307&w=2
- http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/213
- http://www-1.ibm.com/support/search.wss?rs=0&q=IY26221&apar=only
- http://www.cert.org/advisories/CA-2001-34.htmlPatch, Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/569272US Government Resource
- http://www.securityfocus.com/archive/1/246487Vendor Advisory
- http://www.securityfocus.com/bid/3681Exploit, Patch, Vendor Advisory
- http://xforce.iss.net/alerts/advise105.phpPatch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7284
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2025
- ftp://patches.sgi.com/support/free/security/advisories/20011201-01-I
- ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.40/CSSA-2001-SCO.40.txt
- http://marc.info/?l=bugtraq&m=100844757228307&w=2
- http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/213
- http://www-1.ibm.com/support/search.wss?rs=0&q=IY26221&apar=only
- http://www.cert.org/advisories/CA-2001-34.htmlPatch, Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/569272US Government Resource
- http://www.securityfocus.com/archive/1/246487Vendor Advisory
- http://www.securityfocus.com/bid/3681Exploit, Patch, Vendor Advisory
- http://xforce.iss.net/alerts/advise105.phpPatch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7284
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2025
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.