CVE

Id
4216  
CVE No.
CVE-2001-1413  
Status
Candidate  
Description
Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situations that cross security boundaries (such as FTP server), may allow remote attackers to execute arbitrary code via a long filename argument.  
Phase
Assigned (20041018)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
20043 4216 CVE-2001-1413 VULN-DEV:20010621 New bugs, old bugs  View
20044 4216 CVE-2001-1413 URL:http://seclists.org/lists/vuln-dev/2001/Nov/0202.html  View
20045 4216 CVE-2001-1413 GENTOO:GLSA-200410-08  View
20046 4216 CVE-2001-1413 URL:http://security.gentoo.org/glsa/glsa-200410-08.xml  View
20047 4216 CVE-2001-1413 REDHAT:RHSA-2004:536  View
20048 4216 CVE-2001-1413 URL:http://www.redhat.com/support/errata/RHSA-2004-536.html  View
20049 4216 CVE-2001-1413 CERT-VN:VU#176363  View
20050 4216 CVE-2001-1413 URL:http://www.kb.cert.org/vuls/id/176363  View
20051 4216 CVE-2001-1413 XF:ncompress-filename-bo(10619)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64134 JVNDB-2001-000108 ncompress の comprexx() 関数におけるバッファオーバーフローの脆弱性 ncompress において、comprexx() 関数に異常に長い文字列のファイル名を指定された場合に、スタックオーバーフローが発生する脆弱性が存在します。 CVE-2001-1413 4216 7.5 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000108.html  View