Lucene search

MitreCVE-2000-0573

HistoryMay 07, 2001 - 4:00 a.m.

CVE-2000-0573

2001-05-0704:00:00

mitre

web.nvd.nist.gov

wu-ftpd 2.6.0

lreply function

site exec command

remote attack

arbitrary commands

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.97

Percentile

99.7%

JSON

The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command.

Affected configurations

Nvd

Node

hphp-uxMatch11.00

VendorProductVersionCPE
hphp-ux11.00cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	hp-ux	11.00	cpe:2.3:o:hp:hp-ux:11.00:::::::*

References

ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-2000.02

ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:29.wu-ftpd.asc.v1.1

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2000-009.txt.asc

archives.neohapsis.com/archives/bugtraq/2000-06/0244.html

archives.neohapsis.com/archives/bugtraq/2000-07/0017.html

marc.info/?l=bugtraq&m=96171893218000&w=2

marc.info/?l=bugtraq&m=96179429114160&w=2

marc.info/?l=bugtraq&m=96299933720862&w=2

www.calderasystems.com/support/security/advisories/CSSA-2000-020.0.txt

www.cert.org/advisories/CA-2000-13.html

www.redhat.com/support/errata/RHSA-2000-039.html

www.securityfocus.com/bid/1387

www.securityfocus.com/templates/archive.pike?list=1&msg=20000623091822.3321.qmail%40fiver.freemessage.com

exchange.xforce.ibmcloud.com/vulnerabilities/4773

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.97

Percentile

99.7%

JSON

Related for CVE-2000-0573