CVE-2001-0150 — Internet Explorer 5.5 and earlier executes Telnet sessions using command line arguments that are specified by the web site, which could allow remote attackers to execute arbitrary commands if the IE client is using the Telnet client provided in Services for Unix (SFU) 2.0, which creates session transcripts

Back Back to CVE browser

MEDIUM

Internet Explorer 5.5 and earlier executes Telnet sessions using command line arguments that are specified by the web site, which could allow remote attackers to execute arbitrary commands if the IE client is using the Telnet client provided in Services for Unix (SFU) 2.0, which creates session transcripts

Published May 7, 2001

5.1

MEDIUM

CVSS 2.0

EPSS 17.59%

Description

Internet Explorer 5.5 and earlier executes Telnet sessions using command line arguments that are specified by the web site, which could allow remote attackers to execute arbitrary commands if the IE client is using the Telnet client provided in Services for Unix (SFU) 2.0, which creates session transcripts.

Affected products

Remediation

No remediation recorded yet.

Metrics

17.59% 0.17594

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.17594

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (13 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	17.59% (0.17594)	97.06th	v5 (v2026.06.15)
Jun 15, 2026	17.59% (0.17594)	96.75th	v5 (v2026.06.15)
Jul 19, 2025	14.38% (0.14377)	94.09th	v4 (v2025.03.14)
Mar 30, 2025	11.79% (0.11795)	93.07th	v4 (v2025.03.14)
Mar 29, 2025	16.04% (0.16037)	91.34th	v4 (v2025.03.14)
Mar 17, 2025	11.79% (0.11795)	93.15th	v4 (v2025.03.14)
Dec 17, 2024	51.15% (0.51146)	97.65th	v3 (v2023.03.01)
Feb 14, 2024	82.58% (0.82578)	98.29th	v3 (v2023.03.01)
Feb 8, 2024	36.31% (0.36311)	97.01th	v3 (v2023.03.01)
Oct 12, 2023	7.74% (0.07744)	93.44th	v3 (v2023.03.01)
Mar 7, 2023	10.03% (0.10029)	93.91th	v3 (v2023.03.01)
Mar 6, 2023	24.73% (0.24729)	96.86th	v2 (v2022.01.01)
Feb 4, 2022	24.73% (0.24729)	95.30th	v2 (v2022.01.01)

Weaknesses (1)

CWE-88

References (4)

http://www.osvdb.org/7816
vdb-entryx_refsource_OSVDBBroken Link
http://www.securityfocus.com/bid/2463
vdb-entryx_refsource_BIDBroken LinkThird Party AdvisoryVDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015
vendor-advisoryx_refsource_MSPatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6230
vdb-entryx_refsource_XFThird Party AdvisoryVDB Entry

Link	Providers	Tags
http://www.osvdb.org/7816		vdb-entryx_refsource_OSVDBBroken Link
http://www.securityfocus.com/bid/2463		vdb-entryx_refsource_BIDBroken LinkThird Party AdvisoryVDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015		vendor-advisoryx_refsource_MSPatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6230		vdb-entryx_refsource_XFThird Party AdvisoryVDB Entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 7, 2001

Updated Aug 8, 2024

Reserved Feb 10, 2001

Link CVE-2001-0150

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2001-0150

Red Hat

Severity n/a

Public date n/a

Links CVE-2001-0150