CVEvulnerability
CVE-2002-0901
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-10-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver (AMANDA) 2.3.0.4 allow (1) remote attackers to execute arbitrary code via long commands to the amindexd daemon, or certain local users to execute arbitrary code via long command line arguments to the programs (2) amcheck, (3) amgetidx, (4) amtrmidx, (5) createindex-dump, or (6) createindex-gnutar.
Affected configurations
• amanda amanda 2.3.0.4
References
- http://online.securityfocus.com/archive/1/274215 online.securityfocus.com
- http://www.iss.net/security_center/static/9181.php Patch, Vendor Advisory
- http://www.iss.net/security_center/static/9182.php Patch, Vendor Advisory
- http://www.securityfocus.com/bid/4836 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/4840 Patch, Vendor Advisory
- http://online.securityfocus.com/archive/1/274215 online.securityfocus.com
- http://www.iss.net/security_center/static/9181.php Patch, Vendor Advisory
- http://www.iss.net/security_center/static/9182.php Patch, Vendor Advisory
- http://www.securityfocus.com/bid/4836 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/4840 Patch, Vendor Advisory