Explain CVE-2001-0554
Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.
Affected Products: n/a
References: [{'name': 'CLA-2001:413', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000413'}, {'name': 'MDKSA-2001:068', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-068.php3'}, {'name': 'L-131', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/l-131.shtml'}, {'name': 'SSRT0745U', 'tags': ['vendor-advisory', 'x_refsource_COMPAQ'], 'url': 'http://ftp.support.compaq.com/patches/.new/html/SSRT0745U.shtml'}, {'name': 'telnetd-option-telrcv-bo(6875)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6875'}, {'name': '809', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/809'}, {'name': 'MSS-OAR-E01-2001:298', 'tags': ['vendor-advisory', 'x_refsource_IBM'], 'url': 'http://online.securityfocus.com/advisories/3476'}, {'name': '20010725 Telnetd AYT overflow scanner', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/199496'}, {'name': '20010810 ADV/EXP: netkit <=0.17 in.telnetd remote buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/203000'}, {'name': '3064', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3064'}, {'name': 'RHSA-2001:100', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-100.html'}, {'name': 'SuSE-SA:2001:029', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2001_029_nkitb_txt.html'}, {'name': 'CSSA-2001-SCO.10', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.10/CSSA-2001-SCO.10.txt'}, {'name': 'RHSA-2001:099', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-099.html'}, {'name': '20020129 Cisco CatOS Telnet Buffer Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/catos-telrcv-vuln-pub.shtml'}, {'name': 'HPSBUX0110-172', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/hp/2001-q4/0014.html'}, {'name': 'DSA-075', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-075'}, {'name': '20010718 multiple vendor telnet daemon vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/197804'}, {'name': 'CA-2001-21', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2001-21.html'}, {'name': 'FreeBSD-SA-01:49', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:49.telnetd.asc'}, {'name': 'CSSA-2001-030.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.calderasystems.com/support/security/advisories/CSSA-2001-030.0.txt'}, {'name': 'DSA-070', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-070'}, {'name': '20010725 SCO - Telnetd AYT overflow ?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/199541'}, {'name': '20010801-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20010801-01-P'}, {'name': 'NetBSD-SA2001-012', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-012.txt.asc'}]
CVE State: PUBLISHED