CVE-2001-0414

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 91.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2001-06-18 · updated 2026-06-16

Description

Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long readvar argument.

Affected products

Dave Mills Ntpd: through 4.0.99k; 4.0.99, 4.0.99a, 4.0.99b, 4.0.99c, 4.0.99d, 4.0.99e (+5)
Dave Mills Xntp3: 5.93, 5.93a, 5.93b, 5.93c, 5.93d, 5.93e

References

http://archives.neohapsis.com/archives/bugtraq/2001-04/0127.html
http://archives.neohapsis.com/archives/bugtraq/2001-04/0225.html
http://archives.neohapsis.com/archives/bugtraq/2001-04/0314.html
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000392
http://lists.suse.com/archives/suse-security-announce/2001-Apr/0000.html
http://marc.info/?l=bugtraq&m=98642418618512&w=2
http://marc.info/?l=bugtraq&m=98654963328381&w=2
http://marc.info/?l=bugtraq&m=98659782815613&w=2

Get alerted when CVE-2001-0414 or the next vulnerability affects your stack