CVE-2001-0249: HP HP-Ux

Critical severity, CVSS 9.8. EPSS: 19.7% chance of exploitation in the next 30 days.

Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to generate long strings.

Affected products

• HP HP-Ux: version 11.00 only
• Oracle Solaris: version 8 only
• Sgi Irix: from 6.5, up to and including 6.5.20

Published 2001-06-18. Last modified 2026-06-16.