CVE-2001-0907

Linux kernel 2.2.1 through 2.2.19, and 2.4.1 through 2.4.10, allows local users to cause a denial of service via a series of deeply nested symlinks, which causes the kernel to spend extra time when trying to access the link.

• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-036.0.txtBroken Link
• http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-035-01Broken Link
• http://frontal2.mandriva.com/security/advisories?name=MDKSA-2001:079Third Party Advisory
• http://marc.info/?l=bugtraq&m=100343090106914&w=2Mailing List, Third Party Advisory
• http://marc.info/?l=bugtraq&m=100350685431610&w=2Mailing List, Third Party Advisory
• http://www.iss.net/security_center/static/7312.phpBroken Link
• http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-082.php3Broken Link
• http://www.linuxsecurity.com/advisories/other_advisory-1650.htmlThird Party Advisory
• http://www.novell.com/linux/security/advisories/2001_036_kernel_txt.htmlBroken Link
• http://www.securityfocus.com/bid/3444Third Party Advisory, VDB Entry
• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-036.0.txtBroken Link
• http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-035-01Broken Link
• http://frontal2.mandriva.com/security/advisories?name=MDKSA-2001:079Third Party Advisory
• http://marc.info/?l=bugtraq&m=100343090106914&w=2Mailing List, Third Party Advisory
• http://marc.info/?l=bugtraq&m=100350685431610&w=2Mailing List, Third Party Advisory
• http://www.iss.net/security_center/static/7312.phpBroken Link
• http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-082.php3Broken Link
• http://www.linuxsecurity.com/advisories/other_advisory-1650.htmlThird Party Advisory
• http://www.novell.com/linux/security/advisories/2001_036_kernel_txt.htmlBroken Link
• http://www.securityfocus.com/bid/3444Third Party Advisory, VDB Entry

Published

Oct 18, 2001

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2001-0901Hypermail allows remote attackers to execute arbitrary comma…
• CVE-2001-0902Microsoft IIS 5.0 allows remote attackers to spoof web log e…
• CVE-2001-0903Linear key exchange process in High-bandwidth Digital Conten…
• CVE-2001-0904Internet Explorer 5.5 and 6 with the Q312461 (MS01-055) patc…
• CVE-2001-0905Race condition in signal handling of procmail 3.20 and earli…
• CVE-2001-0906teTeX filter before 1.0.7 allows local users to gain privile…
• CVE-2001-0908CITRIX Metaframe 1.8 logs the Client Address (IP address) th…
• CVE-2001-0909Buffer overflow in helpctr.exe program in Microsoft Help Cen…
• CVE-2001-0910Legato Networker before 6.1 allows remote attackers to bypas…
• CVE-2001-0911PHP-Nuke 5.1 stores user and administrator passwords in a ba…
• CVE-2001-0912Packaging error for expect 8.3.3 in Mandrake Linux 8.1 cause…
• CVE-2001-0913Format string vulnerability in Network Solutions Rwhoisd 1.5…