CVE-2001-0249

Critical

Published: 18/06/2001(UTC)Translated: 30/05/2026(UTC)NVD NIST

Summary

Heap overflow in the FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to generate long strings.

Risk Assessment

Attackers can remotely gain control over the system, leading to serious security breaches and potential data loss.

Recommendation

It is recommended to update Solaris to the latest version and restrict access to the FTP daemon only to trusted users.

Original NVD description (English source)

Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to generate long strings.