CVE-2001-0554: Debian Linux

High severity, CVSS 10.0. EPSS: 38.7% chance of exploitation in the next 30 days.

Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.

Affected products

• Debian Debian Linux: version 2.2 only
• Freebsd Freebsd: version 2.0 only; version 2.0.1 only; version 2.0.5 only; version 2.1 only; version 2.1.0 only; version 2.1.5 only; …
• IBM Aix: version 4.3 only; version 4.3.1 only; version 4.3.2 only; version 4.3.3 only; version 5.1 only
• Mit Kerberos: version 1.0 only
• Mit Kerberos 5: version 1.1 only; version 1.1.1 only; version 1.2 only; version 1.2.1 only; version 1.2.2 only
• Netbsd Netbsd: version 1.0 only; version 1.1 only; version 1.2 only; version 1.2.1 only; version 1.3 only; version 1.3.1 only; …
• Netkit Linux Netkit: version 0.10 only; version 0.11 only; version 0.12 only
• OpenBSD OpenBSD: version 2.0 only; version 2.1 only; version 2.2 only; version 2.3 only; version 2.4 only; version 2.5 only; …
• Sgi Irix: version 6.5 only
• Sun Solaris: version 2.6 only
• Sun Sunos: version 5.0 only; version 5.1 only; version 5.2 only; version 5.3 only; version 5.4 only; version 5.5 only; …

Published 2001-08-14. Last modified 2026-06-16.