CVE-2001-1413
Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used...
Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situations that cross security boundaries (such as FTP server), may allow remote attackers to execute arbitrary code via a long filename argument.
Exploit likelihood
What each source reports
NVD Score used
Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situations that cross security boundaries (such as FTP server), may allow remote attackers to execute arbitrary code via a long filename argument.
- Record
CVE-2001-1413- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situations that cross security boundaries (such as FTP server), may allow remote attackers to execute arbitrary code via a long filename argument.
- Record
CVE-2001-1413- Updated
- 2026-11-02
EUVDEUVD-2001-1393 No score
Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situations that cross security boundaries (such as FTP server), may allow remote attackers to execute arbitrary code via a long filename argument.
- Record
EUVD-2001-1393- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wrj9-69rp-mhfh No score
Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used...
Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situations that cross security boundaries (such as FTP server), may allow remote attackers to execute arbitrary code via a long filename argument.
- Record
GHSA-wrj9-69rp-mhfh- Updated
- 2026-11-02
OSV No score
Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situations that cross security boundaries (such as FTP server), may allow remote attackers to execute arbitrary code via a long filename argument.
- Record
CVE-2001-1413- Updated
- 2026-11-02
OSVDEBIAN-CVE-2001-1413 No score
Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situations that cross security boundaries (such as FTP server), may allow remote attackers to execute arbitrary code via a long filename argument.
- Record
DEBIAN-CVE-2001-1413- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2001-1413 is a high vulnerability (CVSS 7.5) in Ncompress, published October 20, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.78%, the 91st percentile. Fixed in ncompress 4.2.4-15.
References
security.gentoo.org/glsa/glsa-200410-08.xml
seclists.org/lists/vuln-dev/2001/Nov/0202.html
redhat.com/support/errata/RHSA-2004-536.html
kb.cert.org/vuls/id/176363
exchange.xforce.ibmcloud.com/vulnerabilities/10619
nvd.nist.gov/vuln/detail/CVE-2001-1413
github.com/advisories/GHSA-wrj9-69rp-mhfh
security-tracker.debian.org/tracker/CVE-2001-1413