HOMEVULNERABILITIESCVE-2001-0554
CRITICALPOC

CVE-2001-0554

CWE-120Published: August 14, 2001· Updated: Jun 16, 2026

10.0
CVSS v3.1

Official Description

Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.

NVD Source

Technical Analysis

CVE-2001-0554 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A proof-of-concept (PoC) exploit exists for CVE-2001-0554. While not yet confirmed in active campaigns, the availability of PoC code increases exploitation risk substantially.

CVSS v3.1 Vector Breakdown

Exploitability
Attack VectorNetwork
Attack ComplexityLow
Privileges Req.
User Interaction
Scope
Impact
ConfidentialityC
IntegrityC
AvailabilityC
AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected Vendors & Products

Debian1 product(s)
debian linux
freebsd1 product(s)
freebsd
IBM1 product(s)
aix
mit2 product(s)
kerberoskerberos 5
netbsd1 product(s)
netbsd
netkit1 product(s)
linux netkit
openbsd1 product(s)
openbsd
sgi1 product(s)
irix
sun2 product(s)
solarissunos
Source: NVD CPE · 80 total CPE entries

Exploit & PoC Resources

POC AVAILABLEProof-of-concept code exists
Exploit-DB
Offensive Security exploit database
GitHub PoC Search
Community PoC repositories
Rapid7 / Metasploit
Metasploit module search
PacketStorm
Security advisories & exploits
NVD Detail
Official NIST entry
MITRE CVE
CVE Program entry
External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

PATCHftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:49.telnetd.asc
PATCHhttp://www.cert.org/advisories/CA-2001-21.html
PATCHhttp://www.securityfocus.com/bid/3064
PATCHftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:49.telnetd.asc
PATCHhttp://www.cert.org/advisories/CA-2001-21.html
PATCHhttp://www.securityfocus.com/bid/3064
ADVISORYhttp://online.securityfocus.com/advisories/3476
ADVISORYhttp://online.securityfocus.com/archive/1/199496
ADVISORYhttp://online.securityfocus.com/archive/1/199541
ADVISORYhttp://online.securityfocus.com/archive/1/203000
ADVISORYhttp://www.cisco.com/warp/public/707/catos-telrcv-vuln-pub.shtml
ADVISORYhttp://www.debian.org/security/2001/dsa-070
ADVISORYhttp://www.debian.org/security/2001/dsa-075
ADVISORYhttp://www.redhat.com/support/errata/RHSA-2001-099.html
ADVISORYhttp://www.redhat.com/support/errata/RHSA-2001-100.html
ADVISORYhttp://www.securityfocus.com/archive/1/197804
ADVISORYhttps://exchange.xforce.ibmcloud.com/vulnerabilities/6875
ADVISORYhttp://online.securityfocus.com/advisories/3476
ADVISORYhttp://online.securityfocus.com/archive/1/199496
ADVISORYhttp://online.securityfocus.com/archive/1/199541
ADVISORYhttp://online.securityfocus.com/archive/1/203000
ADVISORYhttp://www.cisco.com/warp/public/707/catos-telrcv-vuln-pub.shtml
ADVISORYhttp://www.debian.org/security/2001/dsa-070
ADVISORYhttp://www.debian.org/security/2001/dsa-075
ADVISORYhttp://www.redhat.com/support/errata/RHSA-2001-099.html
ADVISORYhttp://www.redhat.com/support/errata/RHSA-2001-100.html
ADVISORYhttp://www.securityfocus.com/archive/1/197804
ADVISORYhttps://exchange.xforce.ibmcloud.com/vulnerabilities/6875

All References (50)

→
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:49.telnetd.ascBroken Link · Patch · Vendor Advisory
→
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-012.txt.ascBroken Link
→
ftp://patches.sgi.com/support/free/security/advisories/20010801-01-PBroken Link
→
ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.10/CSSA-2001-SCO.10.txtBroken Link
→
http://archives.neohapsis.com/archives/hp/2001-q4/0014.htmlBroken Link
→
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000413Broken Link
→
http://ftp.support.compaq.com/patches/.new/html/SSRT0745U.shtmlBroken Link
→
http://online.securityfocus.com/advisories/3476Broken Link · Third Party Advisory · VDB Entry
→
http://online.securityfocus.com/archive/1/199496Broken Link · Third Party Advisory · VDB Entry
→
http://online.securityfocus.com/archive/1/199541Broken Link · Third Party Advisory · VDB Entry
→
http://online.securityfocus.com/archive/1/203000Broken Link · Third Party Advisory · VDB Entry
→
http://www.calderasystems.com/support/security/advisories/CSSA-2001-030.0.txtBroken Link
→
http://www.cert.org/advisories/CA-2001-21.htmlPatch · Third Party Advisory · US Government Resource
→
http://www.ciac.org/ciac/bulletins/l-131.shtmlBroken Link
→
http://www.cisco.com/warp/public/707/catos-telrcv-vuln-pub.shtmlThird Party Advisory

Quick Facts

CVE IDCVE-2001-0554
CVSS Score10.0 / 10
SeverityCRITICAL
WeaknessCWE-120
CISA KEVNo
ExploitPOC
Affected9 vendor(s)
PublishedAug 14, 2001

Related CVEs (CWE-120)

CVE-2010-10016
10.0
CVE-2025-9962
10.0
CVE-2022-22570
10.0
CVE-2012-10035
10.0
CVE-2008-3496
10.0
CVE-2015-5093
10.0

Recommended Actions

  • →Apply vendor patches immediately
  • →Monitor CVE-2001-0554 in threat intel feeds
  • →Review IDS/IPS signatures for exploitation attempts
Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWATCH.COM. CVE data is provided under the NVD usage policy.
← All Vulnerabilities·Search for CVE-2001-0554·NVD