CVE-2001-0609 Other in n/a

Critical 9.8 Published 27 Jul 2001 Updated 8 Aug 2024

A format string vulnerability in cfingerd allows remote attackers to gain privileges or execute code via a malformed ident reply.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2001-0609?

CVE-2001-0609 is a critical vulnerability in n/a, published on 27 Jul 2001. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog function.

Weakness: CWE-193

Which versions are affected by CVE-2001-0609?

It affects 1 product.

Products include Infodrom Cfingerd.

How do I fix CVE-2001-0609?

No fix has been published for CVE-2001-0609 yet. Limit exposure of the affected software until one is available.

Is CVE-2001-0609 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2001-0609 exists.

Public exploit code: 2 Exploit-DB entries.

Sources

Also known as GHSA-fppm-3x24-27q8.