CVE-2001-0247: Critical – Buffer overflows in BSD-based FTP servers allows remote attackers to

◆ AI Analysis — automated analysis, not human-reviewed

Buffer overflows in BSD-based FTP servers allow remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, affecting multiple glob functions.

BSID: BS-2001-GLOBAL-189109-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →

Frequently Asked Questions

What is CVE-2001-0247?

Buffer overflows in BSD-based FTP servers allow remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, affecting multiple glob functions.

What is the CVSS score for CVE-2001-0247?

CVE-2001-0247 has CVSS 10.0 (Critical). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. EPSS: 19.3%.

Is CVE-2001-0247 actively exploited?

Public exploit available for CVE-2001-0247. Exploitation risk elevated.

How do I remediate CVE-2001-0247?

Priority: IMMEDIATE. PSIRT: [email protected]

What systems are affected by CVE-2001-0247?

CVE-2001-0247 affects Freebsd Freebsd; Mit Kerberos 5; Netbsd Netbsd; Openbsd Openbsd; Sgi Irix.

Vulnerability Details

CVE ID	`CVE-2001-0247`
BSID	`BS-2001-GLOBAL-189109-C` BreachSpider Global ID
CVSS Vector	`AV:N/AC:L/Au:N/C:C/I:C/A:C`
Published	2001-06-18
Last Modified	2026-06-16
ICS Relevance	0%
Source	NVD

Official Description

Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2) g_lstat, (3) g_stat, and (4) the glob0 buffer as used in the glob functions glob2 and glob3.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The vulnerability is exploited by sending a specially crafted long pattern string with a {} sequence to the FTP server, which triggers buffer overflows in the glob functions (g_opendir, g_lstat, g_stat, glob0, glob2, glob3). This can lead to arbitrary command execution with the privileges of the FTP server.

Exploitation Likelihood: CRITICAL

Affected Products

Vendor	Product	Affected Versions
Freebsd	Freebsd	`2.2` `2.2.2` `2.2.3` `2.2.4` `2.2.5` `2.2.6` +12 more `2.2.8` `3.0` `3.1` `3.2` `3.3` `3.4` `3.5` `3.5.1` `4.0` `4.1` `4.1.1` `4.2`
Mit	Kerberos 5	`1.1.1` `1.2` `1.2.1` `1.2.2`
Netbsd	Netbsd	`1.2.1` `1.3` `1.3.1` `1.3.2` `1.3.3` `1.4` +4 more `1.4.1` `1.4.2` `1.4.3` `1.5`
Openbsd	Openbsd	`2.3` `2.4` `2.5` `2.6` `2.7` `2.8`
Sgi	Irix	`6.1` `6.5.1` `6.5.2m` `6.5.3` `6.5.3f` `6.5.3m` +7 more `6.5.4` `6.5.5` `6.5.6` `6.5.7` `6.5.8` `6.5.10` `6.5.11`

Remediation

No official vendor advisory link on record. See the CVE record →

Vendor PSIRT: [email protected]

Threat Intelligence

● Threat Intelligence Validated: October 2026 | Threat Age: 9259 Days

CISA known-exploited	Not in KEV catalog
Public Exploit	⚠ Available — Reference
PoC Code	Not confirmed

AI Enrichment Record — provenance & audit hash

Model	`/workspace/models/qwen2.5-coder-32b-instruct-bf16`
Confidence	HIGH
Enriched At	2026-05-24

Related CVEs affecting Freebsd

CVE-2000-0584 10.0 Buffer overflow in Canna input system allows remote attackers to execute arbi... CVE-1999-0798 10.0 Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malfor... CVE-1999-0046 10.0 Buffer overflow of rlogin program using TERM environmental variable. CVE-1999-0323 10.0 FreeBSD mmap function allows users to modify append-only or immutable files. CVE-2001-0388 10.0 time server daemon timed allows remote attackers to cause a denial of service...

View all Freebsd CVEs →

Critical Severity - Know Your Exposure

A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →