CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2000-0573

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0260%
EPSS Percentile24.50th
Published2000年7月7日
Last Modified2026年4月16日

Vulnerability Description

The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command.

Affected Platforms (CPE)

💻
Hp

Hp Ux

= 11.00

References & Advisories

🔗 ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:29.wu-ftpd.asc.v1.1
🔗 ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-2000.02
🔗 ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2000-009.txt.asc
🔗 http://archives.neohapsis.com/archives/bugtraq/2000-06/0244.html
🔗 http://archives.neohapsis.com/archives/bugtraq/2000-07/0017.html
🔗 http://marc.info/?l=bugtraq&m=96171893218000&w=2
🔗 http://marc.info/?l=bugtraq&m=96179429114160&w=2
🔗 http://marc.info/?l=bugtraq&m=96299933720862&w=2

相關漏洞威脅

CVE-2000-000210.0

Buffer overflow in ZBServer Pro 1.50 allows remote attackers to execute commands via a long GET request.

CVE-2000-003210.0

Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database.

CVE-2000-008110.0

Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by usin...

CVE-2000-006510.0

Buffer overflow in InetServ 3.0 allows remote attackers to execute commands via a long GET request.