CyberSec.Space Logo
CVEブラウザに戻る

CVE-2000-0573

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0260%
EPSS Percentile24.50th
Published2000年7月7日
Last Modified2026年4月16日

Vulnerability Description

The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command.

Affected Platforms (CPE)

💻
Hp

Hp Ux

= 11.00

References & Advisories

🔗 ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:29.wu-ftpd.asc.v1.1
🔗 ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-2000.02
🔗 ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2000-009.txt.asc
🔗 http://archives.neohapsis.com/archives/bugtraq/2000-06/0244.html
🔗 http://archives.neohapsis.com/archives/bugtraq/2000-07/0017.html
🔗 http://marc.info/?l=bugtraq&m=96171893218000&w=2
🔗 http://marc.info/?l=bugtraq&m=96179429114160&w=2
🔗 http://marc.info/?l=bugtraq&m=96299933720862&w=2

関連する脆弱性情報

CVE-2000-017710.0

DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters.

CVE-2000-035210.0

Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitra...

CVE-2000-006510.0

Buffer overflow in InetServ 3.0 allows remote attackers to execute commands via a long GET request.

CVE-2000-005910.0

PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could al...