CVE-2001-0191

gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COOKIE cookie, which allows remote attackers to execute arbitrary commands via a buffer overflow, or brute force authentication by using a short cookie length.

• CWE-120

• http://archives.neohapsis.com/archives/bugtraq/2001-02/0030.htmlBroken Link, Patch, Vendor Advisory
• http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-019.php3Broken Link, Patch
• http://www.redhat.com/support/errata/RHSA-2001-010.htmlBroken Link, Patch
• http://www.redhat.com/support/errata/RHSA-2001-011.htmlBroken Link, Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6056Third Party Advisory, VDB Entry
• http://archives.neohapsis.com/archives/bugtraq/2001-02/0030.htmlBroken Link, Patch, Vendor Advisory
• http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-019.php3Broken Link, Patch
• http://www.redhat.com/support/errata/RHSA-2001-010.htmlBroken Link, Patch
• http://www.redhat.com/support/errata/RHSA-2001-011.htmlBroken Link, Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6056Third Party Advisory, VDB Entry

Published

May 3, 2001

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2001-0185Netopia R9100 router version 4.6 allows authenticated users …
• CVE-2001-0186Directory traversal vulnerability in Free Java Web Server 1.…
• CVE-2001-0187Format string vulnerability in wu-ftp 2.6.1 and earlier, whe…
• CVE-2001-0188GoodTech FTP server 3.0.1.2.1.0 and earlier allows remote at…
• CVE-2001-0189Directory traversal vulnerability in LocalWEB2000 HTTP serve…
• CVE-2001-0190Buffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, a…
• CVE-2001-0192Buffer overflows in CTRLServer in XMail allows attackers to …
• CVE-2001-0193Format string vulnerability in man in some Linux distributio…
• CVE-2001-0194Buffer overflow in httpGets function in CUPS 1.1.5 allows re…
• CVE-2001-0195sash before 3.4-4 in Debian GNU/Linux does not properly clon…7.8
• CVE-2001-0196inetd ident server in FreeBSD 4.x and earlier does not prope…
• CVE-2001-0197Format string vulnerability in print_client in icecast 1.3.8…