CVE-2001-1413 — security flaw

Back Back to CVE browser

HIGH

security flaw

Published Oct 20, 2004

7.5

HIGH

CVSS 2.0

EPSS 4.78%

Description

Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situations that cross security boundaries (such as FTP server), may allow remote attackers to execute arbitrary code via a long filename argument.

Affected products

Red Hat Enterprise Linux AS (Advanced Server) version 2.1

n/a

Fixed · RHSA-2004:536
Red Hat Enterprise Linux ES version 2.1

n/a

Fixed · RHSA-2004:536
Red Hat Enterprise Linux WS version 2.1

n/a

Fixed · RHSA-2004:536
Red Hat Linux Advanced Workstation 2.1

n/a

Fixed · RHSA-2004:536

Product	Package	State	Advisory
Red Hat Enterprise Linux AS (Advanced Server) version 2.1	n/a	Fixed	RHSA-2004:536
Red Hat Enterprise Linux ES version 2.1	n/a	Fixed	RHSA-2004:536
Red Hat Enterprise Linux WS version 2.1	n/a	Fixed	RHSA-2004:536
Red Hat Linux Advanced Workstation 2.1	n/a	Fixed	RHSA-2004:536

Remediation

No remediation recorded yet.

Metrics

4.78% 0.04775

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.04775

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (15 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	4.78% (0.04775)	91.64th	v5 (v2026.06.15)
Jun 15, 2026	4.78% (0.04775)	90.74th	v5 (v2026.06.15)
Dec 22, 2025	9.03% (0.09030)	92.35th	v4 (v2025.03.14)
Mar 30, 2025	12.92% (0.12924)	93.43th	v4 (v2025.03.14)
Mar 29, 2025	20.51% (0.20506)	92.77th	v4 (v2025.03.14)
Mar 19, 2025	12.92% (0.12924)	93.20th	v4 (v2025.03.14)
Mar 17, 2025	9.94% (0.09944)	92.45th	v4 (v2025.03.14)
Dec 12, 2024	7.66% (0.07657)	94.44th	v3 (v2023.03.01)
Nov 4, 2024	7.66% (0.07657)	94.35th	v3 (v2023.03.01)
Apr 27, 2024	6.01% (0.06014)	93.39th	v3 (v2023.03.01)
Sep 27, 2023	5.92% (0.05924)	92.55th	v3 (v2023.03.01)
Mar 7, 2023	6.36% (0.06364)	92.51th	v3 (v2023.03.01)
Mar 6, 2023	6.52% (0.06523)	91.37th	v2 (v2022.01.01)
Apr 1, 2022	6.52% (0.06523)	90.53th	v2 (v2022.01.01)
Feb 4, 2022	6.52% (0.06523)	78.43th	v2 (v2022.01.01)

Weaknesses (0)

No CWE recorded.

References (9)

http://seclists.org/lists/vuln-dev/2001/Nov/0202.html
mailing-listx_refsource_VULN-DEV
http://security.gentoo.org/glsa/glsa-200410-08.xml
vendor-advisoryx_refsource_GENTOOPatchVendor Advisory
http://www.kb.cert.org/vuls/id/176363
third-party-advisoryx_refsource_CERT-VNThird Party AdvisoryUS Government Resource
http://www.redhat.com/support/errata/RHSA-2004-536.html
vendor-advisoryx_refsource_REDHATPatchVendor Advisory
https://access.redhat.com/security/cve/CVE-2001-1413
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1616707
Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/10619
vdb-entryx_refsource_XF
https://nvd.nist.gov/vuln/detail/CVE-2001-1413
https://www.cve.org/CVERecord?id=CVE-2001-1413

Link	Providers	Tags
http://seclists.org/lists/vuln-dev/2001/Nov/0202.html		mailing-listx_refsource_VULN-DEV
http://security.gentoo.org/glsa/glsa-200410-08.xml		vendor-advisoryx_refsource_GENTOOPatchVendor Advisory
http://www.kb.cert.org/vuls/id/176363		third-party-advisoryx_refsource_CERT-VNThird Party AdvisoryUS Government Resource
http://www.redhat.com/support/errata/RHSA-2004-536.html		vendor-advisoryx_refsource_REDHATPatchVendor Advisory
https://access.redhat.com/security/cve/CVE-2001-1413		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1616707		Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/10619		vdb-entryx_refsource_XF
https://nvd.nist.gov/vuln/detail/CVE-2001-1413
https://www.cve.org/CVERecord?id=CVE-2001-1413