VDB
CVE-2000-0573
CVE-2000-0573
PUBLISHED
KEV
CVSS 10 CRITICAL
The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command.
EPSS 91.45% · 99.7th percentile
Risk Scores
CVSS 2.0
10
EPSS Score
91.45%
99.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| hp | hp-ux | 11.00 |
| n/a | n/a | n/a |
Timeline
- Jul 7, 2000 CVE Published
- Sep 23, 2010 PoC Published
- Nov 30, 2010 PoC Published
- May 29, 2018 PoC Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
References
- CA-2000-13 third-party-advisory
- 20000707 New Released Version of the WuFTPD Sploit mailing-list
- RHSA-2000:039 vendor-advisory
- CSSA-2000-020.0 vendor-advisory
- 20000622 WuFTPD: Providing *remote* root since at least1994 mailing-list
- 20000702 [Security Announce] wu-ftpd update mailing-list
- 20000723 CONECTIVA LINUX SECURITY ANNOUNCEMENT - WU-FTPD (re-release) mailing-list
- 1387 vdb
- FreeBSD-SA-00:29 vendor-advisory
- AA-2000.02 third-party-advisory
- 20000623 WUFTPD 2.6.0 remote root exploit mailing-list
- NetBSD-SA2000-009 vendor-advisory
- 20000623 ftpd: the advisory version mailing-list
- wuftp-format-string-stack-overwrite(4773) vdb
- https://nvd.nist.gov/vuln/detail/CVE-2000-0573 advisory
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000623091822.3321.qmail@fiver.freemessage.com url