How severe is CVE-2001-0797?

No CVSS score has been assigned to CVE-2001-0797 yet. Review the advisory details and affected package list to assess your exposure.

Which products are affected by CVE-2001-0797?

CVE-2001-0797 affects the following products: hp hp-ux, ibm aix, sco openserver, sgi irix, sun solaris, sun sunos.

How do I patch CVE-2001-0797?

No patch has shipped for CVE-2001-0797 yet — track the hp hp-ux advisory for a fixed release and apply the workarounds below in the meantime.

How do I detect CVE-2001-0797 across my infrastructure?

Inventory every hp hp-ux deployment and check each version against the affected-products list above.

How do I mitigate CVE-2001-0797 if there is no patch (or I can't update yet)?

Constrain what reaches the vulnerable code: limit the size and shape of untrusted input, isolate the affected component in a sandboxed or least-privileged process, and enable the platform's memory-safety mitigations (ASLR, stack protector, hardened allocator) so an out-of-bounds access is more likely to fail closed than to be exploitable. Alongside that, restrict the management interface to trusted networks and apply the vendor's recommended configuration mitigations.

Is CVE-2001-0797 actively exploited in the wild?

Yes. There are 11 known exploit references for CVE-2001-0797, including 8 documented proof-of-concept exploits on Exploit-DB and 3 in-the-wild exploitations observed on GitHub and other sources. Treat this as actively exploitable and prioritize patching immediately. All exploit code should only be run in an isolated sandbox environment for research or authorized testing — never against production systems without explicit written authorization.

What is the EPSS score for CVE-2001-0797?

CVE-2001-0797 has an EPSS (Exploit Prediction Scoring System) score of 94.9%, placing it in the 100th percentile of all CVEs. EPSS is maintained by FIRST.org and estimates the probability that a vulnerability will be exploited in the wild within the next 30 days. A score above 50% indicates significantly elevated exploitation risk — immediate patching is strongly recommended.

Which products and versions are affected by CVE-2001-0797?

CVE-2001-0797 affects hp hp-ux (8 versions, e.g. 10.00, 10.01, 10.10…); ibm aix (5 versions, e.g. 4.3, 4.3.1, 4.3.2…); sco openserver (8 versions, e.g. 5.0, 5.0.1, 5.0.2…); sgi irix (5 versions, e.g. 3.2, 3.3, 3.3.1…), and 2 more product(s). Check the affected-products list on this page against your deployed version to confirm exposure.

When was CVE-2001-0797 published, and has it been updated?

CVE-2001-0797 was published on December 12, 2001 and was last updated on June 16, 2026. Advisory data evolves as severity scores, affected ranges, and exploit intelligence are revised — always check the latest version of the advisory before acting.

Not in CISA KEV

CVE-2001-0797 — HP-UX

CVE-2001-0797 is a remote code execution vulnerability in hp hp-ux. 11 public exploit references exist, so weaponization risk is real. No vendor fix is recorded yet; mitigation options are listed below.

Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.

Published

Dec 12, 2001

Updated

Jun 16, 2026

Affected

6 products

Patched

See advisory

Exploits

11 known

Exploitation data as of Oct 23, 2026 · OSV.dev, NVD, FIRST.org (EPSS)

EPSS Exploitation Probability

via FIRST.org ↗

94.9%probability of exploitation in next 30 days

Very High Risk+0.18%

Lower risk than most CVEs100th percentile — riskier than 100% of all scored CVEsHighest risk

Probability of exploitation in the next 30 days, from FIRST.org EPSS.

Description

Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.

Affected Products

6 products · 43 configurations

hp-uxhp

8 versions

10.0010.0110.1010.2010.2411.0011.0.411.11

aixibm

5 versions

4.34.3.14.3.24.3.35.1

openserversco

8 versions

5.05.0.15.0.25.0.35.0.45.0.55.0.65.0.6a

irixsgi

5 versions

3.23.33.3.13.3.23.3.3

solarissun

6 versions

2.42.52.5.12.67.08.0

sunossun

9 versions

5.05.15.25.35.45.55.5.15.75.8

Exploits & PoCs

Research use only. For defensive security, authorized penetration testing, and academic research only. Never execute exploit code against systems without explicit written authorization.

EDB-21179remotesolaris✓ Verified

Solaris 2.x/7.0/8 - Derived 'login' Remote Buffer Overflow

by snooq · Jan 9, 2003

Exploit-DB Source

EDB-57remotesolaris✓ Verified

Solaris 2.6/7/8 - 'TTYPROMPT in.telnet' Remote Authentication Bypass

by Jonathan S. · Nov 2, 2002

Exploit-DB Source

EDB-10036remotesolaris✓ Verified

System V Derived /bin/login - Extraneous Arguments Buffer Overflow (modem based) (Metasploit)

by I)ruid · Dec 12, 2001

Exploit-DB Source

EDB-346remotelinux_sparc✓ Verified

Solaris /bin/login (SPARC/x86) - Remote Code Execution

by Teso · Dec 20, 2001

Exploit-DB Source

EDB-16928remotelinux✓ Verified

System V Derived /bin/login - Extraneous Arguments Buffer Overflow (Metasploit)

by Metasploit · Jul 3, 2010

Exploit-DB Source

EDB-716remotesolaris✓ Verified

Solaris 2.5.1/2.6/7/8 rlogin (SPARC) - '/bin/login' Remote Buffer Overflow

by Marco Ivaldi · Dec 24, 2004

Exploit-DB Source

EDB-9917remotesolaris✓ Verified

Solaris TelnetD - 'TTYPROMPT' Remote Buffer Overflow (1) (Metasploit)

by MC · Jan 18, 2002

Exploit-DB Source

EDB-16327remotesolaris✓ Verified

Solaris TelnetD - 'TTYPROMPT' Remote Buffer Overflow (2) (Metasploit)

by Metasploit · Jun 22, 2010

Exploit-DB Source

Detection & mitigation playbook

Vendor / appliance

Detect
Inventory every hp hp-ux deployment and check each version against the affected-products list above.
Remediation status
No patch has shipped for CVE-2001-0797 yet — track the hp hp-ux advisory for a fixed release and apply the workarounds below in the meantime.
Mitigate without a patch
Constrain what reaches the vulnerable code: limit the size and shape of untrusted input, isolate the affected component in a sandboxed or least-privileged process, and enable the platform's memory-safety mitigations (ASLR, stack protector, hardened allocator) so an out-of-bounds access is more likely to fail closed than to be exploitable. Alongside that, restrict the management interface to trusted networks and apply the vendor's recommended configuration mitigations.

Frequently Asked Questions

Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.

O3 Security · Runtime Protection

Is CVE-2001-0797 being exploited in your environment?

Detect and block the exploit chain at execution, on systems you cannot patch yet.

Protect my workloads How runtime protection works

CVE-2001-0797 — HP-UX

EPSS Exploitation Probability

Description

Affected Products

Detection & mitigation playbook

Detect

Remediation status

Mitigate without a patch

Frequently Asked Questions

Is CVE-2001-0797 being exploited in your environment?