CVE-2001-0248: HP HP-Ux

Critical severity, CVSS 9.8. EPSS: 11.2% chance of exploitation in the next 30 days.

Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generate long strings.

Affected products

• HP HP-Ux: version 11.00 only
• Sgi Irix: version 6.5 only; version 6.5.1 only; version 6.5.2 only

Published 2001-06-18. Last modified 2026-06-16.