ByteOS Network

Vulnerability Details :

CVE-2000-0573

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-07 May, 2001 | 04:00

Updated At-08 Aug, 2024 | 05:21

The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:07 May, 2001 | 04:00

Updated At:08 Aug, 2024 | 05:21

▼CVE Numbering Authority (CNA)

The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.cert.org/advisories/CA-2000-13.html	third-party-advisory x_refsource_CERT
http://marc.info/?l=bugtraq&m=96299933720862&w=2	mailing-list x_refsource_BUGTRAQ
http://www.redhat.com/support/errata/RHSA-2000-039.html	vendor-advisory x_refsource_REDHAT
http://www.calderasystems.com/support/security/advisories/CSSA-2000-020.0.txt	vendor-advisory x_refsource_CALDERA
http://marc.info/?l=bugtraq&m=96171893218000&w=2	mailing-list x_refsource_BUGTRAQ
http://archives.neohapsis.com/archives/bugtraq/2000-07/0017.html	mailing-list x_refsource_BUGTRAQ
http://archives.neohapsis.com/archives/bugtraq/2000-06/0244.html	mailing-list x_refsource_BUGTRAQ
http://www.securityfocus.com/bid/1387	vdb-entry x_refsource_BID
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:29.wu-ftpd.asc.v1.1	vendor-advisory x_refsource_FREEBSD
ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-2000.02	third-party-advisory x_refsource_AUSCERT
http://marc.info/?l=bugtraq&m=96179429114160&w=2	mailing-list x_refsource_BUGTRAQ
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2000-009.txt.asc	vendor-advisory x_refsource_NETBSD
http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000623091822.3321.qmail%40fiver.freemessage.com	mailing-list x_refsource_BUGTRAQ
https://exchange.xforce.ibmcloud.com/vulnerabilities/4773	vdb-entry x_refsource_XF

Hyperlink: http://www.cert.org/advisories/CA-2000-13.html

Resource:

third-party-advisory

x_refsource_CERT

Hyperlink: http://marc.info/?l=bugtraq&m=96299933720862&w=2

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://www.redhat.com/support/errata/RHSA-2000-039.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.calderasystems.com/support/security/advisories/CSSA-2000-020.0.txt

Resource:

vendor-advisory

x_refsource_CALDERA

Hyperlink: http://marc.info/?l=bugtraq&m=96171893218000&w=2

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://archives.neohapsis.com/archives/bugtraq/2000-07/0017.html

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://archives.neohapsis.com/archives/bugtraq/2000-06/0244.html

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://www.securityfocus.com/bid/1387

Resource:

vdb-entry

x_refsource_BID

Hyperlink: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:29.wu-ftpd.asc.v1.1

Resource:

vendor-advisory

x_refsource_FREEBSD

Hyperlink: ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-2000.02

Resource:

third-party-advisory

x_refsource_AUSCERT

Hyperlink: http://marc.info/?l=bugtraq&m=96179429114160&w=2

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2000-009.txt.asc

Resource:

vendor-advisory

x_refsource_NETBSD

Hyperlink: http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000623091822.3321.qmail%40fiver.freemessage.com

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/4773

Resource:

vdb-entry

x_refsource_XF

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.cert.org/advisories/CA-2000-13.html	third-party-advisory x_refsource_CERT x_transferred
http://marc.info/?l=bugtraq&m=96299933720862&w=2	mailing-list x_refsource_BUGTRAQ x_transferred
http://www.redhat.com/support/errata/RHSA-2000-039.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.calderasystems.com/support/security/advisories/CSSA-2000-020.0.txt	vendor-advisory x_refsource_CALDERA x_transferred
http://marc.info/?l=bugtraq&m=96171893218000&w=2	mailing-list x_refsource_BUGTRAQ x_transferred
http://archives.neohapsis.com/archives/bugtraq/2000-07/0017.html	mailing-list x_refsource_BUGTRAQ x_transferred
http://archives.neohapsis.com/archives/bugtraq/2000-06/0244.html	mailing-list x_refsource_BUGTRAQ x_transferred
http://www.securityfocus.com/bid/1387	vdb-entry x_refsource_BID x_transferred
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:29.wu-ftpd.asc.v1.1	vendor-advisory x_refsource_FREEBSD x_transferred
ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-2000.02	third-party-advisory x_refsource_AUSCERT x_transferred
http://marc.info/?l=bugtraq&m=96179429114160&w=2	mailing-list x_refsource_BUGTRAQ x_transferred
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2000-009.txt.asc	vendor-advisory x_refsource_NETBSD x_transferred
http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000623091822.3321.qmail%40fiver.freemessage.com	mailing-list x_refsource_BUGTRAQ x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/4773	vdb-entry x_refsource_XF x_transferred

Hyperlink: http://www.cert.org/advisories/CA-2000-13.html

Resource:

third-party-advisory

x_refsource_CERT

x_transferred

Hyperlink: http://marc.info/?l=bugtraq&m=96299933720862&w=2

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2000-039.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.calderasystems.com/support/security/advisories/CSSA-2000-020.0.txt

Resource:

vendor-advisory

x_refsource_CALDERA

x_transferred

Hyperlink: http://marc.info/?l=bugtraq&m=96171893218000&w=2

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: http://archives.neohapsis.com/archives/bugtraq/2000-07/0017.html

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: http://archives.neohapsis.com/archives/bugtraq/2000-06/0244.html

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: http://www.securityfocus.com/bid/1387

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:29.wu-ftpd.asc.v1.1

Resource:

vendor-advisory

x_refsource_FREEBSD

x_transferred

Hyperlink: ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-2000.02

Resource:

third-party-advisory

x_refsource_AUSCERT

x_transferred

Hyperlink: http://marc.info/?l=bugtraq&m=96179429114160&w=2

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2000-009.txt.asc

Resource:

vendor-advisory

x_refsource_NETBSD

x_transferred

Hyperlink: http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000623091822.3321.qmail%40fiver.freemessage.com

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/4773

Resource:

vdb-entry

x_refsource_XF

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:07 Jul, 2000 | 04:00

Updated At:03 Apr, 2025 | 01:03

The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

HP Inc.

>>hp-ux>>11.00

cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

CWE ID: NVD-CWE-Other

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:29.wu-ftpd.asc.v1.1	cve@mitre.org	N/A
ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-2000.02	cve@mitre.org	N/A
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2000-009.txt.asc	cve@mitre.org	N/A
http://archives.neohapsis.com/archives/bugtraq/2000-06/0244.html	cve@mitre.org	N/A
http://archives.neohapsis.com/archives/bugtraq/2000-07/0017.html	cve@mitre.org	N/A
http://marc.info/?l=bugtraq&m=96171893218000&w=2	cve@mitre.org	N/A
http://marc.info/?l=bugtraq&m=96179429114160&w=2	cve@mitre.org	N/A
http://marc.info/?l=bugtraq&m=96299933720862&w=2	cve@mitre.org	N/A
http://www.calderasystems.com/support/security/advisories/CSSA-2000-020.0.txt	cve@mitre.org	N/A
http://www.cert.org/advisories/CA-2000-13.html	cve@mitre.org	Patch Third Party Advisory US Government Resource
http://www.redhat.com/support/errata/RHSA-2000-039.html	cve@mitre.org	N/A
http://www.securityfocus.com/bid/1387	cve@mitre.org	N/A
http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000623091822.3321.qmail%40fiver.freemessage.com	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/4773	cve@mitre.org	N/A
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:29.wu-ftpd.asc.v1.1	af854a3a-2127-422b-91ae-364da2661108	N/A
ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-2000.02	af854a3a-2127-422b-91ae-364da2661108	N/A
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2000-009.txt.asc	af854a3a-2127-422b-91ae-364da2661108	N/A
http://archives.neohapsis.com/archives/bugtraq/2000-06/0244.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://archives.neohapsis.com/archives/bugtraq/2000-07/0017.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://marc.info/?l=bugtraq&m=96171893218000&w=2	af854a3a-2127-422b-91ae-364da2661108	N/A
http://marc.info/?l=bugtraq&m=96179429114160&w=2	af854a3a-2127-422b-91ae-364da2661108	N/A
http://marc.info/?l=bugtraq&m=96299933720862&w=2	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.calderasystems.com/support/security/advisories/CSSA-2000-020.0.txt	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.cert.org/advisories/CA-2000-13.html	af854a3a-2127-422b-91ae-364da2661108	Patch Third Party Advisory US Government Resource
http://www.redhat.com/support/errata/RHSA-2000-039.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/1387	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000623091822.3321.qmail%40fiver.freemessage.com	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/4773	af854a3a-2127-422b-91ae-364da2661108	N/A