Vulnerability Name:

CVE-2001-0111 (CCN-5948)

Assigned:2001-01-14
Published:2001-01-14
Updated:2017-10-10
Summary:Format string vulnerability in splitvt before 1.6.5 allows local users to execute arbitrary commands via the -rcfile command line argument.
CVSS v3 Severity:9.3 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:7.2 High (CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
7.2 High (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-Other
Vulnerability Consequences:Gain Access
References:Source: CCN
Type: BugTraq Mailing List, Sun Jan 14 2001 - 13:41:49 CST
[MSY] Multiple vulnerabilities in splitvt

Source: MITRE
Type: CNA
CVE-2001-0111

Source: BUGTRAQ
Type: UNKNOWN
20010114 [MSY] Multiple vulnerabilities in splitvt

Source: DEBIAN
Type: Patch
DSA-014-1

Source: DEBIAN
Type: DSA-014
splitvt -- buffer overflow and format string attack

Source: CCN
Type: SplitVT Download
SplitVT

Source: CCN
Type: OSVDB ID: 1729
Linux splitvt -rcfile Argument Format String

Source: BID
Type: Exploit, Patch, Vendor Advisory
2210

Source: CCN
Type: BID-2210
splitvt Format String Vulnerability

Source: XF
Type: UNKNOWN
splitvt-perserc-format-string(5948)

Source: XF
Type: UNKNOWN
splitvt-perserc-format-string(5948)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:sam_lantinga:splitvt:1.6.4:*:*:*:*:*:*:*

  • Configuration 2:
  • cpe:/o:debian:debian_linux:2.2:*:*:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:2.2:*:68k:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:2.2:*:alpha:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:2.2:*:arm:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:2.2:*:powerpc:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:2.2:*:sparc:*:*:*:*:*

  • Configuration CCN 1:
  • cpe:/o:debian:debian_linux:2.2:*:*:*:*:*:*:*

  • * Denotes that component is vulnerable
    BACK
    sam_lantinga splitvt 1.6.4
    debian debian linux 2.2
    debian debian linux 2.2
    debian debian linux 2.2
    debian debian linux 2.2
    debian debian linux 2.2
    debian debian linux 2.2
    debian debian linux 2.2