Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2001-0554

60
FAUCET Score

CVE-2001-0554 describes a critical buffer overflow vulnerability in the BSD-based telnetd daemon, affecting numerous operating systems including Debian, FreeBSD, OpenBSD, and Solaris. This flaw allows unauthenticated remote attackers to execute arbitrary commands by sending a malformed AYT (Are You There) option, which the telrcv function fails to handle securely. With a CVSS score of 10.0, it represents a high-severity risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, exploit code is publicly available, as evidenced by an ExploitDB entry, though there is no indication of widespread active exploitation or significant community discussion.

Impacted Technologies

VendorProductVersion(s)CPE
1.0CPE matchmatch criteria
cpe:2.3:a:mit:kerberos:1.0:*:*:*:*:*:*:*
1.1CPE matchmatch criteria
cpe:2.3:a:mit:kerberos_5:1.1:*:*:*:*:*:*:*
1.1.1CPE matchmatch criteria
cpe:2.3:a:mit:kerberos_5:1.1.1:*:*:*:*:*:*:*
1.2CPE matchmatch criteria
cpe:2.3:a:mit:kerberos_5:1.2:*:*:*:*:*:*:*
1.2.1CPE matchmatch criteria
cpe:2.3:a:mit:kerberos_5:1.2.1:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

10.0HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C

Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Exploitability Score
10.0
Impact Score
10.0
CvssVersion
2.0

Exploit Intelligence

EPSS Score
37.90%
Probability of exploitation in next 30 days
EPSS Percentile
98.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
ExploitDB: EDB-21018 · Jul 18, 2001
This CVE's current EPSS score of 0.3790 is in the 97th percentile among its peer group of 51,466 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (4)

redhatpatch availablevia redhat_api
Product: Red Hat Linux 5.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Linux 6.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Linux 7.0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Linux 7.1
View patch

Vendor Advisories (1)

redhatCVE-2001-0554Critical

security flaw

Jul 18, 2001

References

ftp.freebsd.org / pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:49.telnetd.asc
Broken LinkPatchVendor Advisory
ftp.netbsd.org / pub/NetBSD/security/advisories/NetBSD-SA2001-012.txt.asc
Broken Link
patches.sgi.com / support/free/security/advisories/20010801-01-P
Broken Link
stage.caldera.com / pub/security/openserver/CSSA-2001-SCO.10/CSSA-2001-SCO.10.txt
Broken Link
archives.neohapsis.com / archives/hp/2001-q4/0014.html
Broken Link
distro.conectiva.com.br / atualizacoes
Broken Link
ftp.support.compaq.com / patches/.new/html/SSRT0745U.shtml
Broken Link
online.securityfocus.com / advisories/3476
Broken LinkThird Party AdvisoryVDB Entry
online.securityfocus.com / archive/1/199496
Broken LinkThird Party AdvisoryVDB Entry
online.securityfocus.com / archive/1/199541
Broken LinkThird Party AdvisoryVDB Entry
online.securityfocus.com / archive/1/203000
Broken LinkThird Party AdvisoryVDB Entry
exchange.xforce.ibmcloud.com / vulnerabilities/6875
Third Party AdvisoryVDB Entry
calderasystems.com / support/security/advisories/CSSA-2001-030.0.txt
Broken Link
cert.org / advisories/CA-2001-21.html
PatchThird Party AdvisoryUS Government Resource
ciac.org / ciac/bulletins/l-131.shtml
Broken Link
cisco.com / warp/public/707/catos-telrcv-vuln-pub.shtml
Third Party Advisory
debian.org / security/2001/dsa-070
Third Party Advisory
debian.org / security/2001/dsa-075
Third Party Advisory
linux-mandrake.com / en/security/2001/MDKSA-2001-068.php3
Broken Link
novell.com / linux/security/advisories/2001_029_nkitb_txt.html
Broken Link
osvdb.org / 809
Broken Link
redhat.com / support/errata/RHSA-2001-099.html
Third Party Advisory
redhat.com / support/errata/RHSA-2001-100.html
Third Party Advisory
securityfocus.com / archive/1/197804
ExploitThird Party AdvisoryVDB EntryVendor Advisory
securityfocus.com / bid/3064
ExploitPatchThird Party AdvisoryVDB EntryVendor Advisory