CVE-2001-1413

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-12-23 · updated 2026-06-16

Description

Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situations that cross security boundaries (such as FTP server), may allow remote attackers to execute arbitrary code via a long filename argument.

Affected products

Ncompress: through 4.2.4

References

http://seclists.org/lists/vuln-dev/2001/Nov/0202.html
http://security.gentoo.org/glsa/glsa-200410-08.xml
http://www.kb.cert.org/vuls/id/176363
http://www.redhat.com/support/errata/RHSA-2004-536.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/10619
http://seclists.org/lists/vuln-dev/2001/Nov/0202.html
http://security.gentoo.org/glsa/glsa-200410-08.xml
http://www.kb.cert.org/vuls/id/176363
http://www.redhat.com/support/errata/RHSA-2004-536.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/10619

Get alerted when CVE-2001-1413 or the next vulnerability affects your stack