5

CVE-2000-0574

FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of service or execute arbitrary commands.

Data is provided by the National Vulnerability Database (NVD)
OpenbsdFtpd Version5.51
OpenbsdFtpd Version5.60
Washington UniversityWu-ftpd Version2.4.2_beta1 Editionacadem
Washington UniversityWu-ftpd Version2.4.2_beta18 Editionacadem
Washington UniversityWu-ftpd Version2.4.2_beta18_vr4
Washington UniversityWu-ftpd Version2.4.2_beta18_vr5
Washington UniversityWu-ftpd Version2.4.2_beta18_vr6
Washington UniversityWu-ftpd Version2.4.2_beta18_vr7
Washington UniversityWu-ftpd Version2.4.2_beta18_vr8
Washington UniversityWu-ftpd Version2.4.2_beta18_vr9
Washington UniversityWu-ftpd Version2.4.2_beta18_vr10
Washington UniversityWu-ftpd Version2.4.2_beta18_vr11
Washington UniversityWu-ftpd Version2.4.2_beta18_vr12
Washington UniversityWu-ftpd Version2.4.2_beta18_vr13
Washington UniversityWu-ftpd Version2.4.2_beta18_vr14
Washington UniversityWu-ftpd Version2.4.2_beta18_vr15
Washington UniversityWu-ftpd Version2.4.2_vr16
Washington UniversityWu-ftpd Version2.4.2_vr17
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 12.74% 0.933
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P