CVE-2001-0554

Solaris 2.x/7.0/8 / IRIX 6.5.x / OpenBSD 2.x / NetBSD 1.x / Debian 3 / HP-UX 10 - 'TelnetD' Remote Buffer Overflow

Severity Score

9.8

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.

The Netkit telnetd implementation shipped with Debian Linux appears to be lacking the AYT vulnerability patch. This exposes the platform to a remote root problem discovered by scut of TESO back in 2001.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2001-07-24 CVE Reserved
2001-08-14 CVE Published
2012-09-02 First Exploit
2024-08-08 CVE Updated
2025-03-30 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CAPEC

References (28)

URL	Tag	Source
http://online.securityfocus.com/archive/1/199496	Broken Link
http://online.securityfocus.com/archive/1/199541	Broken Link
http://online.securityfocus.com/archive/1/203000	Broken Link
http://www.ciac.org/ciac/bulletins/l-131.shtml	Broken Link
http://www.osvdb.org/809	Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/6875	Third Party Advisory

URL	Date	SRC
https://www.exploit-db.com/exploits/21018	2012-09-02
http://www.securityfocus.com/archive/1/197804	2024-08-08
http://www.securityfocus.com/bid/3064	2024-08-08

URL	Date	SRC
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:49.telnetd.asc	2022-01-21
http://www.cert.org/advisories/CA-2001-21.html	2022-01-21

URL	Date	SRC
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-012.txt.asc	2022-01-21
ftp://patches.sgi.com/support/free/security/advisories/20010801-01-P	2022-01-21
ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.10/CSSA-2001-SCO.10.txt	2022-01-21
http://archives.neohapsis.com/archives/hp/2001-q4/0014.html	2022-01-21
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000413	2022-01-21
http://ftp.support.compaq.com/patches/.new/html/SSRT0745U.shtml	2022-01-21
http://online.securityfocus.com/advisories/3476	2022-01-21
http://www.calderasystems.com/support/security/advisories/CSSA-2001-030.0.txt	2022-01-21
http://www.cisco.com/warp/public/707/catos-telrcv-vuln-pub.shtml	2022-01-21
http://www.debian.org/security/2001/dsa-070	2022-01-21
http://www.debian.org/security/2001/dsa-075	2022-01-21
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-068.php3	2022-01-21
http://www.novell.com/linux/security/advisories/2001_029_nkitb_txt.html	2022-01-21
http://www.redhat.com/support/errata/RHSA-2001-099.html	2022-01-21
http://www.redhat.com/support/errata/RHSA-2001-100.html	2022-01-21
https://access.redhat.com/security/cve/CVE-2001-0554	2001-08-09
https://bugzilla.redhat.com/show_bug.cgi?id=1616596	2001-08-09

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Mit Search vendor "Mit"		Kerberos Search vendor "Mit" for product "Kerberos"				1.0 Search vendor "Mit" for product "Kerberos" and version "1.0"		-		Affected
Mit Search vendor "Mit"		Kerberos 5 Search vendor "Mit" for product "Kerberos 5"				1.1 Search vendor "Mit" for product "Kerberos 5" and version "1.1"		-		Affected
Mit Search vendor "Mit"		Kerberos 5 Search vendor "Mit" for product "Kerberos 5"				1.1.1 Search vendor "Mit" for product "Kerberos 5" and version "1.1.1"		-		Affected
Mit Search vendor "Mit"		Kerberos 5 Search vendor "Mit" for product "Kerberos 5"				1.2 Search vendor "Mit" for product "Kerberos 5" and version "1.2"		-		Affected
Mit Search vendor "Mit"		Kerberos 5 Search vendor "Mit" for product "Kerberos 5"				1.2.1 Search vendor "Mit" for product "Kerberos 5" and version "1.2.1"		-		Affected
Mit Search vendor "Mit"		Kerberos 5 Search vendor "Mit" for product "Kerberos 5"				1.2.2 Search vendor "Mit" for product "Kerberos 5" and version "1.2.2"		-		Affected
Netkit Search vendor "Netkit"		Linux Netkit Search vendor "Netkit" for product "Linux Netkit"				0.10 Search vendor "Netkit" for product "Linux Netkit" and version "0.10"		-		Affected
Netkit Search vendor "Netkit"		Linux Netkit Search vendor "Netkit" for product "Linux Netkit"				0.11 Search vendor "Netkit" for product "Linux Netkit" and version "0.11"		-		Affected
Netkit Search vendor "Netkit"		Linux Netkit Search vendor "Netkit" for product "Linux Netkit"				0.12 Search vendor "Netkit" for product "Linux Netkit" and version "0.12"		-		Affected
Sgi Search vendor "Sgi"		Irix Search vendor "Sgi" for product "Irix"				6.5 Search vendor "Sgi" for product "Irix" and version "6.5"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				2.0 Search vendor "Freebsd" for product "Freebsd" and version "2.0"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				2.0.1 Search vendor "Freebsd" for product "Freebsd" and version "2.0.1"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				2.0.5 Search vendor "Freebsd" for product "Freebsd" and version "2.0.5"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				2.1 Search vendor "Freebsd" for product "Freebsd" and version "2.1"		stable		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				2.1.0 Search vendor "Freebsd" for product "Freebsd" and version "2.1.0"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				2.1.5 Search vendor "Freebsd" for product "Freebsd" and version "2.1.5"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				2.1.6 Search vendor "Freebsd" for product "Freebsd" and version "2.1.6"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				2.1.6.1 Search vendor "Freebsd" for product "Freebsd" and version "2.1.6.1"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				2.1.7 Search vendor "Freebsd" for product "Freebsd" and version "2.1.7"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				2.1.7.1 Search vendor "Freebsd" for product "Freebsd" and version "2.1.7.1"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				2.2 Search vendor "Freebsd" for product "Freebsd" and version "2.2"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				2.2 Search vendor "Freebsd" for product "Freebsd" and version "2.2"		current		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				2.2.1 Search vendor "Freebsd" for product "Freebsd" and version "2.2.1"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				2.2.2 Search vendor "Freebsd" for product "Freebsd" and version "2.2.2"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				2.2.3 Search vendor "Freebsd" for product "Freebsd" and version "2.2.3"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				2.2.4 Search vendor "Freebsd" for product "Freebsd" and version "2.2.4"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				2.2.5 Search vendor "Freebsd" for product "Freebsd" and version "2.2.5"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				2.2.6 Search vendor "Freebsd" for product "Freebsd" and version "2.2.6"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				2.2.7 Search vendor "Freebsd" for product "Freebsd" and version "2.2.7"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				2.2.8 Search vendor "Freebsd" for product "Freebsd" and version "2.2.8"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				3.0 Search vendor "Freebsd" for product "Freebsd" and version "3.0"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				3.0 Search vendor "Freebsd" for product "Freebsd" and version "3.0"		releng		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				3.1 Search vendor "Freebsd" for product "Freebsd" and version "3.1"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				3.2 Search vendor "Freebsd" for product "Freebsd" and version "3.2"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				3.3 Search vendor "Freebsd" for product "Freebsd" and version "3.3"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				3.4 Search vendor "Freebsd" for product "Freebsd" and version "3.4"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				3.5 Search vendor "Freebsd" for product "Freebsd" and version "3.5"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				3.5 Search vendor "Freebsd" for product "Freebsd" and version "3.5"		stable		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				3.5.1 Search vendor "Freebsd" for product "Freebsd" and version "3.5.1"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				3.5.1 Search vendor "Freebsd" for product "Freebsd" and version "3.5.1"		release		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				3.5.1 Search vendor "Freebsd" for product "Freebsd" and version "3.5.1"		stable		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				4.0 Search vendor "Freebsd" for product "Freebsd" and version "4.0"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				4.0 Search vendor "Freebsd" for product "Freebsd" and version "4.0"		alpha		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				4.0 Search vendor "Freebsd" for product "Freebsd" and version "4.0"		releng		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				4.1 Search vendor "Freebsd" for product "Freebsd" and version "4.1"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				4.1.1 Search vendor "Freebsd" for product "Freebsd" and version "4.1.1"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				4.2 Search vendor "Freebsd" for product "Freebsd" and version "4.2"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				4.3 Search vendor "Freebsd" for product "Freebsd" and version "4.3"		-		Affected
Ibm Search vendor "Ibm"		Aix Search vendor "Ibm" for product "Aix"				4.3 Search vendor "Ibm" for product "Aix" and version "4.3"		-		Affected
Ibm Search vendor "Ibm"		Aix Search vendor "Ibm" for product "Aix"				4.3.1 Search vendor "Ibm" for product "Aix" and version "4.3.1"		-		Affected
Ibm Search vendor "Ibm"		Aix Search vendor "Ibm" for product "Aix"				4.3.2 Search vendor "Ibm" for product "Aix" and version "4.3.2"		-		Affected
Ibm Search vendor "Ibm"		Aix Search vendor "Ibm" for product "Aix"				4.3.3 Search vendor "Ibm" for product "Aix" and version "4.3.3"		-		Affected
Ibm Search vendor "Ibm"		Aix Search vendor "Ibm" for product "Aix"				5.1 Search vendor "Ibm" for product "Aix" and version "5.1"		-		Affected
Netbsd Search vendor "Netbsd"		Netbsd Search vendor "Netbsd" for product "Netbsd"				1.0 Search vendor "Netbsd" for product "Netbsd" and version "1.0"		-		Affected
Netbsd Search vendor "Netbsd"		Netbsd Search vendor "Netbsd" for product "Netbsd"				1.1 Search vendor "Netbsd" for product "Netbsd" and version "1.1"		-		Affected
Netbsd Search vendor "Netbsd"		Netbsd Search vendor "Netbsd" for product "Netbsd"				1.2 Search vendor "Netbsd" for product "Netbsd" and version "1.2"		-		Affected
Netbsd Search vendor "Netbsd"		Netbsd Search vendor "Netbsd" for product "Netbsd"				1.2.1 Search vendor "Netbsd" for product "Netbsd" and version "1.2.1"		-		Affected
Netbsd Search vendor "Netbsd"		Netbsd Search vendor "Netbsd" for product "Netbsd"				1.3 Search vendor "Netbsd" for product "Netbsd" and version "1.3"		-		Affected
Netbsd Search vendor "Netbsd"		Netbsd Search vendor "Netbsd" for product "Netbsd"				1.3.1 Search vendor "Netbsd" for product "Netbsd" and version "1.3.1"		-		Affected
Netbsd Search vendor "Netbsd"		Netbsd Search vendor "Netbsd" for product "Netbsd"				1.3.2 Search vendor "Netbsd" for product "Netbsd" and version "1.3.2"		-		Affected
Netbsd Search vendor "Netbsd"		Netbsd Search vendor "Netbsd" for product "Netbsd"				1.3.3 Search vendor "Netbsd" for product "Netbsd" and version "1.3.3"		-		Affected
Netbsd Search vendor "Netbsd"		Netbsd Search vendor "Netbsd" for product "Netbsd"				1.4 Search vendor "Netbsd" for product "Netbsd" and version "1.4"		-		Affected
Netbsd Search vendor "Netbsd"		Netbsd Search vendor "Netbsd" for product "Netbsd"				1.4.1 Search vendor "Netbsd" for product "Netbsd" and version "1.4.1"		-		Affected
Netbsd Search vendor "Netbsd"		Netbsd Search vendor "Netbsd" for product "Netbsd"				1.4.2 Search vendor "Netbsd" for product "Netbsd" and version "1.4.2"		-		Affected
Netbsd Search vendor "Netbsd"		Netbsd Search vendor "Netbsd" for product "Netbsd"				1.4.3 Search vendor "Netbsd" for product "Netbsd" and version "1.4.3"		-		Affected
Netbsd Search vendor "Netbsd"		Netbsd Search vendor "Netbsd" for product "Netbsd"				1.5 Search vendor "Netbsd" for product "Netbsd" and version "1.5"		-		Affected
Netbsd Search vendor "Netbsd"		Netbsd Search vendor "Netbsd" for product "Netbsd"				1.5.1 Search vendor "Netbsd" for product "Netbsd" and version "1.5.1"		-		Affected
Openbsd Search vendor "Openbsd"		Openbsd Search vendor "Openbsd" for product "Openbsd"				2.0 Search vendor "Openbsd" for product "Openbsd" and version "2.0"		-		Affected
Openbsd Search vendor "Openbsd"		Openbsd Search vendor "Openbsd" for product "Openbsd"				2.1 Search vendor "Openbsd" for product "Openbsd" and version "2.1"		-		Affected
Openbsd Search vendor "Openbsd"		Openbsd Search vendor "Openbsd" for product "Openbsd"				2.2 Search vendor "Openbsd" for product "Openbsd" and version "2.2"		-		Affected
Openbsd Search vendor "Openbsd"		Openbsd Search vendor "Openbsd" for product "Openbsd"				2.3 Search vendor "Openbsd" for product "Openbsd" and version "2.3"		-		Affected
Openbsd Search vendor "Openbsd"		Openbsd Search vendor "Openbsd" for product "Openbsd"				2.4 Search vendor "Openbsd" for product "Openbsd" and version "2.4"		-		Affected
Openbsd Search vendor "Openbsd"		Openbsd Search vendor "Openbsd" for product "Openbsd"				2.5 Search vendor "Openbsd" for product "Openbsd" and version "2.5"		-		Affected
Openbsd Search vendor "Openbsd"		Openbsd Search vendor "Openbsd" for product "Openbsd"				2.6 Search vendor "Openbsd" for product "Openbsd" and version "2.6"		-		Affected
Openbsd Search vendor "Openbsd"		Openbsd Search vendor "Openbsd" for product "Openbsd"				2.7 Search vendor "Openbsd" for product "Openbsd" and version "2.7"		-		Affected
Openbsd Search vendor "Openbsd"		Openbsd Search vendor "Openbsd" for product "Openbsd"				2.8 Search vendor "Openbsd" for product "Openbsd" and version "2.8"		-		Affected
Sun Search vendor "Sun"		Solaris Search vendor "Sun" for product "Solaris"				2.6 Search vendor "Sun" for product "Solaris" and version "2.6"		-		Affected
Sun Search vendor "Sun"		Sunos Search vendor "Sun" for product "Sunos"				5.0 Search vendor "Sun" for product "Sunos" and version "5.0"		-		Affected
Sun Search vendor "Sun"		Sunos Search vendor "Sun" for product "Sunos"				5.1 Search vendor "Sun" for product "Sunos" and version "5.1"		-		Affected
Sun Search vendor "Sun"		Sunos Search vendor "Sun" for product "Sunos"				5.2 Search vendor "Sun" for product "Sunos" and version "5.2"		-		Affected
Sun Search vendor "Sun"		Sunos Search vendor "Sun" for product "Sunos"				5.3 Search vendor "Sun" for product "Sunos" and version "5.3"		-		Affected
Sun Search vendor "Sun"		Sunos Search vendor "Sun" for product "Sunos"				5.4 Search vendor "Sun" for product "Sunos" and version "5.4"		-		Affected
Sun Search vendor "Sun"		Sunos Search vendor "Sun" for product "Sunos"				5.5 Search vendor "Sun" for product "Sunos" and version "5.5"		-		Affected
Sun Search vendor "Sun"		Sunos Search vendor "Sun" for product "Sunos"				5.5.1 Search vendor "Sun" for product "Sunos" and version "5.5.1"		-		Affected
Sun Search vendor "Sun"		Sunos Search vendor "Sun" for product "Sunos"				5.7 Search vendor "Sun" for product "Sunos" and version "5.7"		-		Affected
Sun Search vendor "Sun"		Sunos Search vendor "Sun" for product "Sunos"				5.8 Search vendor "Sun" for product "Sunos" and version "5.8"		-		Affected
Debian Search vendor "Debian"		Debian Linux Search vendor "Debian" for product "Debian Linux"				2.2 Search vendor "Debian" for product "Debian Linux" and version "2.2"		-		Affected