Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.2
CVE-2001-0764: Scotty 2.1.0 lets local users run code
CVE-2001-0764 · published 25 years ago
Summary
The Scotty tool version 2.1.0 contains a flaw where entering an unusually long hostname can overflow its memory. This lets anyone with access to the computer run any program they choose. Apply the vendor’s update or limit local access until the fix is installed.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| juergen_schoenwaelder | scotty |
2.1.7 2.1.8 2.1.9 2.1.10 cpe:2.3:a:juergen_schoenwaelder:scotty:2.1.7:*:*:*:*:*:*:* |
Original advisory text
Buffer overflow in ntping in scotty 2.1.0 allows local users to execute arbitrary code via a long hostname as a command line argument.
Buffer overflow in ntping in scotty 2.1.0 allows local users to execute arbitrary code via a long hostname as a command line argument.
References
- http://archives.neohapsis.com/archives/vuln-dev/2001-q2/0579.html
- http://archives.neohapsis.com/archives/vuln-dev/2001-q2/0627.html
- http://www.novell.com/linux/security/advisories/2001_023_scotty_txt.html
- http://www.securityfocus.com/archive/1/192664 Exploit Patch Vendor Advisory
- http://www.securityfocus.com/bid/2911 Exploit Patch Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6735
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Severity
7.2
High
Timeline
Published18 Oct 2001
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2001-0764 · NVD
Track software like this
Free during beta