CVE-2000-0574
FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 58.9%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of service or execute arbitrary commands.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 58.87% probability · 99th percentile
- CISA KEV
- Not listed
- Affected
- openbsd/ftpd · washington university/wu-ftpd
- Source
- cve@mitre.org
References
- ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-009.txt.asc
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0031.html
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0061.html
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0121.html
- http://www.cert.org/advisories/CA-2000-13.htmlPatch, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/1425
- http://www.securityfocus.com/bid/1438
- ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-009.txt.asc
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0031.html
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0061.html
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0121.html
- http://www.cert.org/advisories/CA-2000-13.htmlPatch, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/1425
- http://www.securityfocus.com/bid/1438
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.