---
cve: "CVE-2001-0414"
severity: "LOW"
cvss: 3.1
epss: "91.7%"
vendor: "n/a"
kev: false
exploited: false
published: "2001-09-18 04:00:00"
tags: [cve, security, low]
source: tsecurity.de CVE-Dossier
exported: "2026-09-10T08:46:11+02:00"
---

# CVE-2001-0414

> 3.1 LOW

## Beschreibung

Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long readvar argument.

## Exploit-Evidenz

- [EDB-16285 — NTP daemon readvar - Remote Buffer Overflow (Metasploit)](https://www.exploit-db.com/exploits/16285) ✅
- [EDB-20727 — NTPd - Remote Buffer Overflow](https://www.exploit-db.com/exploits/20727) ✅
- [EDB-9940 — NTPd 4.0.99j-k readvar - Remote Buffer Overflow (Metasploit)](https://www.exploit-db.com/exploits/9940) ✅

## Referenzen

- <http://www.redhat.com/support/errata/RHSA-2001-045.html>
- <http://lists.suse.com/archives/suse-security-announce/2001-Apr/0000.html>
- <http://archives.neohapsis.com/archives/bugtraq/2001-04/0127.html>
- <http://marc.info/?l=bugtraq&m=98683952401753&w=2>
- <http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-036.php3>
- <http://marc.info/?l=bugtraq&m=98642418618512&w=2>
- <http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000392>
- <http://www.osvdb.org/805>
- <http://marc.info/?l=bugtraq&m=98684532921941&w=2>
- <http://www.securityfocus.com/bid/2540>
- <https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3831>
- <http://marc.info/?l=bugtraq&m=98659782815613&w=2>
- <http://marc.info/?l=bugtraq&m=98654963328381&w=2>
- <http://archives.neohapsis.com/archives/bugtraq/2001-04/0225.html>
- <http://marc.info/?l=bugtraq&m=98679815917014&w=2>
- <http://archives.neohapsis.com/archives/bugtraq/2001-04/0314.html>
- <http://marc.info/?l=bugtraq&m=98684202610470&w=2>
- <https://www.debian.org/security/2001/dsa-045>
- <https://exchange.xforce.ibmcloud.com/vulnerabilities/6321>
- <http://www.calderasystems.com/support/security/advisories/CSSA-2001-013.0.txt>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2001-0414) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_