What’s Vulnerable › Vulnerabilities

CVE-2001-0554

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 38.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2001-08-14 · updated 2026-06-16
• Weakness: CWE-120

Description

Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.

Affected products

• Debian Linux: 2.2
• FreeBSD: 2.0, 2.0.1, 2.0.5, 2.1-stable, 2.1.0, 2.1.5 (+32)
• IBM AIX: 4.3, 4.3.1, 4.3.2, 4.3.3, 5.1
• MIT Kerberos: 1.0
• MIT Kerberos 5: 1.1, 1.1.1, 1.2, 1.2.1, 1.2.2
• Netbsd: 1.0, 1.1, 1.2, 1.2.1, 1.3, 1.3.1 (+8)
• Netkit Linux Netkit: 0.10, 0.11, 0.12
• OpenBSD: 2.0, 2.1, 2.2, 2.3, 2.4, 2.5 (+3)
• Sgi Irix: 6.5
• Sun Solaris: 2.6
• Sunos: 5.0, 5.1, 5.2, 5.3, 5.4, 5.5 (+3)

References

• http://archives.neohapsis.com/archives/hp/2001-q4/0014.html
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000413
• http://ftp.support.compaq.com/patches/.new/html/SSRT0745U.shtml
• http://online.securityfocus.com/advisories/3476
• http://online.securityfocus.com/archive/1/199496
• http://online.securityfocus.com/archive/1/199541
• http://online.securityfocus.com/archive/1/203000
• http://www.calderasystems.com/support/security/advisories/CSSA-2001-030.0.txt

Get alerted when CVE-2001-0554 or the next vulnerability affects your stack