CRITICAL🇵🇱 Wersja polska

CVE-2001-0249

CVSS 9.8v3.1pub. 2001-06-18upd. 2026-04-16

Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to generate long strings.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • HP Ux

    OS
    Hp
    11.00

  • Oracle Solaris

    OS
    Oracle
    8

  • Sgi Irix

    OS
    Sgi
    6.5 – 6.5.20
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Memory
CWE
References

Related vulnerabilities

CVE-2020-14871CRITICAL10.0⚠ KEVPL ✓same product

Oracle Solaris PAM — zdalne przejęcie systemu bez uwierzytelnienia

CVE-2013-2251CRITICAL9.8⚠ KEVPL ✓same product

Apache Struts 2: RCE przez prefiks action/redirect w parametrach

CVE-2012-1823CRITICAL9.8⚠ KEVPL ✓same product

RCE w PHP-CGI poprzez wstrzyknięcie opcji wiersza poleceń

CVE-2026-46978CRITICAL10.0PL ✓same product

Auth Bypass w Oracle Solaris Remote Administration Daemon (CVSS 10.0)

CVE-2025-36038CRITICAL9.0PL ✓same product

RCE w IBM WebSphere Application Server przez niebezpieczną deserializację