CVE-2002-0901

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-10-04 · updated 2026-06-16

Description

Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver (AMANDA) 2.3.0.4 allow (1) remote attackers to execute arbitrary code via long commands to the amindexd daemon, or certain local users to execute arbitrary code via long command line arguments to the programs (2) amcheck, (3) amgetidx, (4) amtrmidx, (5) createindex-dump, or (6) createindex-gnutar.

Affected products

Amanda: 2.3.0.4

References

http://online.securityfocus.com/archive/1/274215
http://www.iss.net/security_center/static/9181.php
http://www.iss.net/security_center/static/9182.php
http://www.securityfocus.com/bid/4836
http://www.securityfocus.com/bid/4840
http://online.securityfocus.com/archive/1/274215
http://www.iss.net/security_center/static/9181.php
http://www.iss.net/security_center/static/9182.php
http://www.securityfocus.com/bid/4836
http://www.securityfocus.com/bid/4840

Get alerted when CVE-2002-0901 or the next vulnerability affects your stack