CVE-2001-0191

Severity Score

10.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COOKIE cookie, which allows remote attackers to execute arbitrary commands via a buffer overflow, or brute force authentication by using a short cookie length.

*Credits: N/A

CVSS Scores

NISTv2 10.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2001-03-08 CVE Reserved
2001-05-03 CVE Published
2024-02-15 EPSS Updated
2024-08-08 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CAPEC

References (5)

URL	Tag	Source
https://exchange.xforce.ibmcloud.com/vulnerabilities/6056	Third Party Advisory

URL	Date	SRC

URL	Date	SRC
http://archives.neohapsis.com/archives/bugtraq/2001-02/0030.html	2024-02-14
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-019.php3	2024-02-14
http://www.redhat.com/support/errata/RHSA-2001-010.html	2024-02-14
http://www.redhat.com/support/errata/RHSA-2001-011.html	2024-02-14

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Andynorman Search vendor "Andynorman"	Gnuserv Search vendor "Andynorman" for product "Gnuserv"	< 3.12 Search vendor "Andynorman" for product "Gnuserv" and version " < 3.12"	-	Affected	in	Gnu Search vendor "Gnu"	Xemacs Search vendor "Gnu" for product "Xemacs"	-	-	Safe