VULNERABILITY INTELLIGENCE

CVE-2001-0554

CVSS score10 HIGH
EPSS probability38.75%
CISA KEVNot currently listed
Published2001-08-14
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.

Weakness classification

  • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Primary references