CVE-2001-0735

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2001-10-18 · updated 2026-06-16

Description

Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file.

Affected products

Infodrom Cfingerd: 1.4.1, 1.4.2, 1.4.3

References

http://www.debian.org/security/2001/dsa-066
http://www.securityfocus.com/archive/1/01071120191900.00788%40localhost.localdomain
http://www.securityfocus.com/archive/1/192844
http://www.securityfocus.com/bid/2914
https://exchange.xforce.ibmcloud.com/vulnerabilities/6744
http://www.debian.org/security/2001/dsa-066
http://www.securityfocus.com/archive/1/01071120191900.00788%40localhost.localdomain
http://www.securityfocus.com/archive/1/192844
http://www.securityfocus.com/bid/2914
https://exchange.xforce.ibmcloud.com/vulnerabilities/6744

Get alerted when CVE-2001-0735 or the next vulnerability affects your stack