Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2001-0233Improper Restriction of Operations within the Bounds of a Memory Buffer in Smith Micq

6 documents6 sources
Severity
10.0CRITICALNVD
EPSS
14.8%
top 5.48%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Timeline
PublishedMar 26
Latest updateMay 3

Description

Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Description field.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages2 packages

NVDredhat/linux4 versions+3

Also affects: Debian Linux 2.2

Patches

🔴Vulnerability Details

2
GHSA
GHSA-5pjr-78vj-8mwr: Buffer overflow in micq client 02022-05-03
CVEList
CVE-2001-0233: Buffer overflow in micq client 02001-05-07

💥Exploits & PoCs

1
Exploit-DB
mICQ 0.4.6 - Remote Buffer Overflow2001-01-17

📋Vendor Advisories

1
Red Hat
security flaw2001-01-18

💬Community

1
Bugzilla
CVE-2001-0233 security flaw2018-08-16
CVE-2001-0233 — Matthew Smith Micq vulnerability | cvebase