PT-2001-1854 · Microsoft · Internet Explorer+2

Published 2001-10-30 · Updated 2025-01-16 · CVE-2001-0667

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions: Internet Explorer versions 6 and earlier

Description: The issue allows remote attackers to execute commands by spawning Telnet with a log file option on the command line and writing arbitrary code into an executable file which is later executed.

Recommendations: For Internet Explorer versions 6 and earlier, consider disabling the Telnet client in Services for Unix (SFU) 2.0 as a temporary workaround until a patch is available. Restrict access to the Telnet client to minimize the risk of exploitation.

Fix

Argument Injection

Weakness Enumeration

CWE-88

Related Identifiers

CVE-2001-0667

Affected Products

Internet Explorer

Services For Unix

Telnet

References · 6

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-051 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0667 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7260 · Note
• http://ciac.org/ciac/bulletins/m-024.shtml · Note
• https://t.me/cvenotify/71277 · Telegram Post
• http://kb.cert.org/vuls/id/952611 · Note