Unscored severity · published Jun 15, 2001
CVE-2001-1077
Buffer overflow in tt_printf function of rxvt 2.6.2 allows local users to gain privileges via a long (1) -T or (2) -name argument
–
CVSS
1.1%
EPSS
No
On KEV
Description
Buffer overflow in tt_printf function of rxvt 2.6.2 allows local users to gain privileges via a long (1) -T or (2) -name argument.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RX
Rxvt · Rxvt
2.6.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-1077
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-1077
Patch
http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-028-01
Patch
http://www.debian.org/security/2001/dsa-062
www.linux-mandrake.com
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-060.php
Exploit
http://www.securityfocus.com/archive/1/191510
www.securityfocus.com
http://www.securityfocus.com/bid/2878
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/6701
More from Rxvt
–
CVE-2008-1142
rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections
–
CVE-2003-0022
The "screen dump" feature in rxvt 2.7.8 allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g
–
CVE-2003-0023
The menuBar feature in rxvt 2.7.8 allows attackers to modify menu options and execute arbitrary commands via a certain character escape sequence that inserts the commands into the…
–
CVE-2003-0066
The rxvt terminal emulator 2.7.8 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the…
–
CVE-2000-0476
xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be resized