Unrated severityNVD Advisory· Published Dec 23, 2004· Updated Jun 16, 2026

CVE-2001-1413

Description

Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situations that cross security boundaries (such as FTP server), may allow remote attackers to execute arbitrary code via a long filename argument.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ncompress/Ncompress2 versions
cpe:2.3:a:ncompress:ncompress:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ncompress:ncompress:*:*:*:*:*:*:*:*range: <=4.2.4
- (no CPE)range: <=4.2.4

Patches

Vulnerability mechanics

References

security.gentoo.org/glsa/glsa-200410-08.xmlnvdPatchVendor Advisory
www.redhat.com/support/errata/RHSA-2004-536.htmlnvdPatchVendor Advisory
www.kb.cert.org/vuls/id/176363nvdThird Party AdvisoryUS Government Resource
seclists.org/lists/vuln-dev/2001/Nov/0202.htmlnvd
exchange.xforce.ibmcloud.com/vulnerabilities/10619nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000