CVEvulnerability
CVE-2000-0574
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2000-07-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Description
FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of service or execute arbitrary commands.
Affected configurations
• openbsd ftpd 5.51
• openbsd ftpd 5.60
• washington university wu-ftpd 2.4.2 beta1
• washington university wu-ftpd 2.4.2 beta18
• washington university wu-ftpd 2.4.2 beta18 vr4
• washington university wu-ftpd 2.4.2 beta18 vr5
• washington university wu-ftpd 2.4.2 beta18 vr6
• washington university wu-ftpd 2.4.2 beta18 vr7
• washington university wu-ftpd 2.4.2 beta18 vr8
• washington university wu-ftpd 2.4.2 beta18 vr9
• washington university wu-ftpd 2.4.2 beta18 vr10
• washington university wu-ftpd 2.4.2 beta18 vr11
• washington university wu-ftpd 2.4.2 beta18 vr12
• washington university wu-ftpd 2.4.2 beta18 vr13
• washington university wu-ftpd 2.4.2 beta18 vr14
• washington university wu-ftpd 2.4.2 beta18 vr15
• washington university wu-ftpd 2.4.2 vr16
• washington university wu-ftpd 2.4.2 vr17
• washington university wu-ftpd 2.5
• washington university wu-ftpd 2.6
References
- ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-009.txt.asc ftp.NetBSD.ORG
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0031.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0061.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0121.html archives.neohapsis.com
- http://www.cert.org/advisories/CA-2000-13.html Patch, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/1425 www.securityfocus.com
- http://www.securityfocus.com/bid/1438 www.securityfocus.com
- ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-009.txt.asc ftp.NetBSD.ORG
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0031.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0061.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0121.html archives.neohapsis.com
- http://www.cert.org/advisories/CA-2000-13.html Patch, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/1425 www.securityfocus.com
- http://www.securityfocus.com/bid/1438 www.securityfocus.com