Executive Summary

Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to generate long strings.

Why It Matters

CVE-2001-0249 is rated CRITICAL severity, requiring immediate attention from security teams.

CVSS Base Score: 9.8/10

Affected Technologies

Vendors: hp, oracle, sgi

Products: hp-ux, solaris, irix

🛡️What Defenders Should Check

Check if you are affected — Review your asset inventory for products listed in CVE-2001-0249.

Apply available patches — Visit vendor advisories for the latest security updates.

Monitor for exploitation — Check your SIEM/IDS logs for related indicators.

Use Vulnios to continuously monitor your exposure to CVE-2001-0249 and similar vulnerabilities.

References & Sources

http://www.cert.org/advisories/CA-2001-07.html

http://www.nai.com/research/covert/advisories/048.asp

http://www.securityfocus.com/bid/2550

https://exchange.xforce.ibmcloud.com/vulnerabilities/6332

http://www.cert.org/advisories/CA-2001-07.html

http://www.nai.com/research/covert/advisories/048.asp

http://www.securityfocus.com/bid/2550

https://exchange.xforce.ibmcloud.com/vulnerabilities/6332

AI Security Advisor

Get AI-powered security recommendations tailored to this specific threat — including risk assessment, detection guidance, MITRE ATT&CK mapping, and actionable remediation steps.

Affected Products

hp-uxsolarisirix

Sources

NVD / NIST

critical

Protect Your Organization

Monitor CVEs, scan for vulnerabilities, and get real-time threat alerts — all in one platform.

Get Started Free Free Security Scan OSINT Dashboard

Get instant alerts on Telegram

Join our public channel for real-time critical CVE alerts.

Follow @vulnios

Critical Vulnerability: CVE-2001-0249 — hp, oracle — hp-ux, solaris