CVE-2001-0554
Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote...
CVE-2001-0554 is a high vulnerability (CVSS 10.0) in Debian Linux, published August 14, 2001. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 38.7%, the 98th percentile. No source names a fixed version.
Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.
- Record
CVE-2001-0554- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-120
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.
- Record
CVE-2001-0554- Updated
- 2026-11-02
EUVDEUVD-2001-0546 No score
Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.
- Record
EUVD-2001-0546- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cxg3-hwc8-9mx4 No score
Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote...
Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.
- Record
GHSA-cxg3-hwc8-9mx4- Weakness
- CWE-120
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Solaris 2.x/7.0/8 / IRIX 6.5.x / OpenBSD 2.x / NetBSD 1.x / Debian 3 / HP-UX 10 - 'TelnetD' Remote Buffer Overflow | 2001-07-18 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD |
References
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000413
linux-mandrake.com/en/security/2001/MDKSA-2001-068.php3
ciac.org/ciac/bulletins/l-131.shtml
ftp.support.compaq.com/patches/.new/html/SSRT0745U.shtml
exchange.xforce.ibmcloud.com/vulnerabilities/6875
osvdb.org/809
Show 17 moreShow less
online.securityfocus.com/advisories/3476
securityfocus.com/bid/3064
redhat.com/support/errata/RHSA-2001-100.html
novell.com/linux/security/advisories/2001_029_nkitb_txt.html
cisco.com/warp/public/707/catos-telrcv-vuln-pub.shtml
archives.neohapsis.com/archives/hp/2001-q4/0014.html
debian.org/security/2001/dsa-075
cert.org/advisories/CA-2001-21.html
calderasystems.com/support/security/advisories/CSSA-2001-030.0.txt
nvd.nist.gov/vuln/detail/CVE-2001-0554
github.com/advisories/GHSA-cxg3-hwc8-9mx4