CVE-2001-0421: Sun Solaris

Medium severity, CVSS 6.4. EPSS: 6.2% chance of exploitation in the next 30 days.

FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readable permissions, by providing a valid username with an invalid password followed by a CWD ~ command, which could release sensitive information such as shadowed passwords, or fill the disk partition.

Affected products

  • Sun Solaris: version 2.6 only
  • Sun Sunos: up to and including 5.9

Published 2001-07-02. Last modified 2026-06-16.