Vulnerability Name:

CVE-2001-0181 (CCN-5953)

Assigned:2001-01-15
Published:2001-01-15
Updated:2017-12-19
Summary:Format string vulnerability in the error logging code of DHCP server and client in Caldera Linux allows remote attackers to execute arbitrary commands.
CVSS v3 Severity:10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
10.0 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-Other
Vulnerability Consequences:Gain Privileges
References:Source: CCN
Type: Caldera International, Inc. Security Advisory CSSA-2001-003.0
security problems in dhcp

Source: MITRE
Type: CNA
CVE-2001-0181

Source: CALDERA
Type: Patch, Vendor Advisory
CSSA-2001-003.0

Source: CCN
Type: OSVDB ID: 13802
Caldera Linux DHCP Server/Client Error Logging Code Format String

Source: BID
Type: Patch, Vendor Advisory
2215

Source: CCN
Type: BID-2215
Caldera DHCP Package Format String Vulnerabililty

Source: XF
Type: UNKNOWN
dhcp-format-string(5953)

Source: XF
Type: UNKNOWN
dhcp-format-string(5953)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:caldera:openlinux_desktop:2.3:*:*:*:*:*:*:*

    • Configuration 2:
  • cpe:/o:caldera:openlinux_edesktop:2.4:*:*:*:*:*:*:*
  • OR cpe:/o:caldera:openlinux_eserver:2.3.1:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    caldera openlinux desktop 2.3
    caldera openlinux edesktop 2.4
    caldera openlinux eserver 2.3.1