
CVE-2001-0247 – FreeBSD 2.2-4.2 / NetBSD 1.2-4.5 / OpenBSD 2.x - FTPd 'glob()' Remote Buffer Overflow
https://notcve.org/view.php?id=CVE-2001-0247
24 May 2001 — Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2) g_lstat, (3) g_stat, and (4) the glob0 buffer as used in the glob functions glob2 and glob3. • https://www.exploit-db.com/exploits/20731 •

CVE-2001-0248
https://notcve.org/view.php?id=CVE-2001-0248
24 May 2001 — Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generate long strings. • http://www.cert.org/advisories/CA-2001-07.html • CWE-131: Incorrect Calculation of Buffer Size •

CVE-2001-0249
https://notcve.org/view.php?id=CVE-2001-0249
24 May 2001 — Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to generate long strings. • http://www.cert.org/advisories/CA-2001-07.html • CWE-131: Incorrect Calculation of Buffer Size •

CVE-2000-0844 – Immunix OS 6.2 - LC glibc format string
https://notcve.org/view.php?id=CVE-2000-0844
14 Nov 2000 — Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen. • https://www.exploit-db.com/exploits/20187 • CWE-264: Permissions, Privileges, and Access Controls •

CVE-2000-0795 – IRIX 5.3/6.2/6.3/6.4/6.5/6.5.11 - '/usr/bin/lpstat' Local Overflow / Local Privilege Escalation
https://notcve.org/view.php?id=CVE-2000-0795
20 Oct 2000 — Buffer overflow in lpstat in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long -n option. • https://www.exploit-db.com/exploits/265 •

CVE-2000-0796 – IRIX 6.5.x - '/usr/sbin/dmplay' Local Buffer Overflow
https://notcve.org/view.php?id=CVE-2000-0796
20 Oct 2000 — Buffer overflow in dmplay in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long command line option. • https://www.exploit-db.com/exploits/20128 •

CVE-2000-0797 – IRIX 6.5.x - '/usr/sbin/gr_osview' Local Buffer Overflow
https://notcve.org/view.php?id=CVE-2000-0797
20 Oct 2000 — Buffer overflow in gr_osview in IRIX 6.2 and 6.3 allows local users to gain privileges via a long -D option. • https://www.exploit-db.com/exploits/20126 •

CVE-2000-0799 – IRIX 6.5.x - '/usr/lib/InPerson/inpview' Race Condition
https://notcve.org/view.php?id=CVE-2000-0799
20 Oct 2000 — inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a symlink attack on the .ilmpAAA temporary file. • https://www.exploit-db.com/exploits/20130 •

CVE-2000-0733 – IRIX 5.2/5.3/6.x - TelnetD Environment Variable Format String
https://notcve.org/view.php?id=CVE-2000-0733
13 Oct 2000 — Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execute arbitrary commands via a long RLD variable in the IAC-SB-TELOPT_ENVIRON request. • https://www.exploit-db.com/exploits/20149 •

CVE-2000-0794 – SGI IRIX 6.2 - 'libgl.so' Local Buffer Overflow
https://notcve.org/view.php?id=CVE-2000-0794
21 Sep 2000 — Buffer overflow in IRIX libgl.so library allows local users to gain root privileges via a long HOME variable to programs such as (1) gmemusage and (2) gr_osview. • https://www.exploit-db.com/exploits/20127 •