What’s Vulnerable › Vulnerabilities

CVE-2001-0913

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2001-11-22 · updated 2026-06-16

Description

Format string vulnerability in Network Solutions Rwhoisd 1.5.7.2 and earlier, when using syslog, allows remote attackers to corrupt memory and possibly execute arbitrary code via a rwhois request that contains format specifiers.

Affected products

• Network Solutions Rwhoisd: 1.5, 1.5.1a, 1.5.2, 1.5.3, 1.5.5, 1.5.6 (+3)

References

• http://lists.research.netsol.com/pipermail/rwhois-announce/2001-November/000023.html
• http://marc.info/?l=bugtraq&m=100655265508104&w=2
• http://lists.research.netsol.com/pipermail/rwhois-announce/2001-November/000023.html
• http://marc.info/?l=bugtraq&m=100655265508104&w=2

Get alerted when CVE-2001-0913 or the next vulnerability affects your stack