CVE-2001-0191
Critical
Description
gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COOKIE cookie, which allows remote attackers to execute arbitrary commands via a buffer overflow, or brute force authentication by using a short cookie length.
SeverityCritical
CVSS10.0
Exploit probability—
ProductAndynorman Gnuserv
PublishedMay 3, 2001
First seenMay 3, 2001
How to fix
Update
- andynorman gnuserv3.12 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| andynorman gnuserv | v < 3.12 | 3.12 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.