CVE

Id
3069  
CVE No.
CVE-2001-0248  
Status
Candidate  
Description
Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generate long strings.  
Phase
Interim (20010911)  
Votes
ACCEPT(5) Baker, Cole, Prosser, Renaud, Ziese | MODIFY(1) Frech | NOOP(1) Wall  
Comments
Frech> XF:ftp-glob-expansion(6332) | Prosser> HPSBUX0107-162. Probably should change description to add the | HP-UX 10.01, 10.10, 10.20, 10.24 (VVOS), 11.04 (VVOS) and 11.11 | versions of the operating system as well. Patches for all systems | referenced in the advisory.  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
12772 3069 CVE-2001-0248 NAI:20010409 Globbing Vulnerabilities in Multiple FTP Daemons  View
12773 3069 CVE-2001-0248 URL:http://www.nai.com/research/covert/advisories/048.asp  View
12774 3069 CVE-2001-0248 CERT:CA-2001-07  View
12775 3069 CVE-2001-0248 URL:http://www.cert.org/advisories/CA-2001-07.html  View
12776 3069 CVE-2001-0248 BID:2552  View
12777 3069 CVE-2001-0248 URL:http://www.securityfocus.com/bid/2552  View
12778 3069 CVE-2001-0248 XF:ftp-glob-expansion(6332)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64073 JVNDB-2001-000047 HP-UX に含まれる ftpd の glob() 関数におけるバッファオーバーフローの脆弱性 HP-UX に含まれる ftpd には、STAT コマンドの引数が glob() 関数により補完された後に、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2001-0248 3069 10 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000047.html  View