PT-2001-1383 · Microsoft · Internet Explorer+1

Published 2001-05-07 · Updated 2024-02-13 · CVE-2001-0150

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Internet Explorer versions 5.5 and earlier

Description: The issue allows remote attackers to execute arbitrary commands if the Internet Explorer client is using the Telnet client provided in Services for Unix (SFU) 2.0. This is because Internet Explorer executes Telnet sessions using command line arguments specified by the web site, and SFU 2.0 creates session transcripts.

Recommendations: For Internet Explorer versions 5.5 and earlier, consider disabling the use of the Telnet client provided in Services for Unix (SFU) 2.0 as a temporary workaround until a patch is available. Restrict access to Telnet sessions to minimize the risk of exploitation.

Exploit

Fix

Argument Injection

Weakness Enumeration

CWE-88

Related Identifiers

CVE-2001-0150

Affected Products

Internet Explorer

Services For Unix

References · 8

• 🔥 https://exploit-db.com/exploits/20680 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0150 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015 · Vendor Advisory
• http://securityfocus.com/bid/2463 · Note
• http://osvdb.org/7816 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6230 · Note
• https://t.me/cvenotify/71277 · Telegram Post
• https://t.me/cvenotify/71276 · Telegram Post