CVE-2001-0459

CVE-2001-0459 describes buffer overflow vulnerabilities in the ascdc component of Afterstep, specifically affecting versions from afterstep.org and rob_malda. Local users can exploit these flaws by providing excessively long strings to the -d, -m, or -f command-line options when ascdc is running with setuid permissions, leading to root privilege escalation. This vulnerability is rated as High severity (CVSS 7.2), indicating a local attack vector with low attack complexity, allowing for complete compromise of confidentiality, integrity, and availability. The FAUCET Risk Score is 86/100, highlighting its significant potential impact. While not listed on the CISA KEV catalog or Hot List, exploit code for this vulnerability is publicly available on ExploitDB. There is no evidence of active exploitation in the wild, and it has received no community discussion or media coverage.