CVE-2001-0554: Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You…

Description

Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.

Exploitation

Is it being used?

Exploit prediction (EPSS)38.7% · higher than 99% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

AI

Aix · Ibm

4.3; 4.3.1; 4.3.2; 4.3.3; 5.1 · source: NVD

DL

Debian Linux · Debian

2.2 · source: NVD

FR

Freebsd · Freebsd

2.0; 2.0.1; 2.0.5; 2.1; 2.1.0; 2.1.5; +32 more · source: NVD

IR

Irix · Sgi

6.5 · source: NVD

KE

Kerberos · Mit

1.0 · source: NVD

K5

Kerberos 5 · Mit

1.1; 1.1.1; 1.2; 1.2.1; 1.2.2 · source: NVD

LN

Linux Netkit · Netkit

0.10; 0.11; 0.12 · source: NVD

NE

Netbsd · Netbsd

1.0; 1.1; 1.2; 1.2.1; 1.3; 1.3.1; +8 more · source: NVD

OP

Openbsd · Openbsd

2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +3 more · source: NVD

SO

Solaris · Sun

2.6 · source: NVD

SU

Sunos · Sun

5.0; 5.1; 5.2; 5.3; 5.4; 5.5; +3 more · source: NVD