CVE-2001-1413: Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situatio...

Security readout for executives and security teams

CVE-2001-1413 is an old ncompress flaw where an overly long filename can overflow memory. The business risk appears when ncompress is used behind a trust boundary, such as an FTP service or upload workflow, because an outside user may influence the filename and potentially gain code execution. Exposure is most likely on legacy Unix/Linux systems still running ncompress 4.2.4 or earlier, especially FTP servers, file upload handlers, archival gateways, or batch jobs that invoke ncompress on externally supplied filenames. Prioritize remediation if ncompress is reachable through FTP, upload, or automated file-processing paths. For internal-only legacy hosts with no untrusted filename input, handle through normal vulnerability management, but still plan removal or vendor-aligned update. Mitigation focus: Inventory systems for ncompress and record exact package versions.; Apply applicable vendor guidance from Red Hat, Gentoo, CERT, or your distribution.; Remove ncompress where it is not operationally required..

Prepared

Jun 30, 2026, 02:24 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.