7.5

CVE-2000-0751

mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netbsd ≫ Netbsd Version 1.4.1
Netbsd ≫ Netbsd Version 1.4.2
Openbsd ≫ Openbsd Version 2.4
Openbsd ≫ Openbsd Version 2.5
Openbsd ≫ Openbsd Version 2.6
Openbsd ≫ Openbsd Version 2.7
Redhat ≫ Linux Version 6.0
Redhat ≫ Linux Version 6.1
Redhat ≫ Linux Version 6.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.81% 0.887
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://archives.neohapsis.com/archives/bugtraq/2000-08/0064.html
Vendor Advisory
http://archives.neohapsis.com/archives/freebsd/2000-08/0336.html
Patch
Vendor Advisory
http://cvsweb.netbsd.org/bsdweb.cgi/basesrc/usr.sbin/mopd/mopd/process.c.diff?r1=1.7&r2=1.8&f=h
http://www.openbsd.org/errata.html#mopd
http://www.redhat.com/support/errata/RHSA-2000-050.html
http://www.securityfocus.com/bid/1559
Patch
Vendor Advisory