Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2001-0414

EPSS 81.16% · P99
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2001-0414

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long readvar argument.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Ntpd远程缓冲区溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
多种Unix/Linux操作系统和Cisco路由器的网络时间协议守护进程(NTPD)容易遭受远程缓冲区溢出攻击。 由于NTP基于无状态的UDP协议，于是可以伪造各种恶意的请求报文，引发远程缓冲区溢出。绝大多数情况下，NTPD是以root身份启动的，所以远程缓冲区溢出后将直接获取root权限。 尽管这次是常规缓冲区溢出，但为了有效利用它进行攻击还是相当困难的。目标缓冲区会因为某些原因被破坏，攻击完成时，shellcode真正可利用的缓冲区将小于70字节。下面的演示代码简单执行了/tmp/sh而已，完全可以构
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2001-0414

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2001-0414

请登录查看更多情报信息。

Same Patch Batch · n/a · 2001-09-18 · 94 CVEs total

CVE-2001-0383PHP Nuke远程ad横幅URL改变漏洞
CVE-2001-0377Infradig Inframail服务拒绝漏洞
CVE-2001-0361SSH安装启用漏洞
CVE-2001-0347Microsoft W2K Telnet多种域用户账户访问漏洞
CVE-2001-0346Microsoft Windows远程登录服务句柄泄漏
CVE-2001-0345Microsoft Windows 2000 Telnet多会话拒绝服务漏洞
CVE-2001-0344Microsoft SQL Server 2000权限提升漏洞
CVE-2001-0341Microsoft FrontPage 2000服务器扩展fp30reg.dll远程缓冲区溢出漏洞(MS01-035)
CVE-2001-0348Microsoft Windows 2000 telnet service拒绝服务漏洞
CVE-2001-0379HP-UX newgrp访问权限获得漏洞
CVE-2001-0378OpenBSD readline信息泄漏漏洞
CVE-2001-0387HylaFAX格式字符串漏洞
CVE-2001-0388time服务器守护进程timed漏洞
CVE-2001-0402IPFilter访问限制绕过漏洞
CVE-2001-0405Linux防火墙漏洞
CVE-2001-0408vim程序控制代码任意文件执行漏洞
CVE-2001-0409vim(也称为gvim)漏洞
CVE-2001-0412Cisco Content Services Switch User提升特权漏洞
CVE-2001-0413BinTec X4000 Access路由器服务拒绝漏洞
CVE-2001-0427Cisco VPN 3000集中器服务拒绝漏洞

Showing top 20 of 94 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2001-0414

No comments yet

Leave a comment