CVEvulnerability

CVE-2000-0574

5.0 MEDIUM Published 2000-07-07 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2000-07-07
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of service or execute arbitrary commands.

Affected configurations

• openbsd ftpd 5.51 • openbsd ftpd 5.60 • washington university wu-ftpd 2.4.2 beta1 • washington university wu-ftpd 2.4.2 beta18 • washington university wu-ftpd 2.4.2 beta18 vr4 • washington university wu-ftpd 2.4.2 beta18 vr5 • washington university wu-ftpd 2.4.2 beta18 vr6 • washington university wu-ftpd 2.4.2 beta18 vr7 • washington university wu-ftpd 2.4.2 beta18 vr8 • washington university wu-ftpd 2.4.2 beta18 vr9 • washington university wu-ftpd 2.4.2 beta18 vr10 • washington university wu-ftpd 2.4.2 beta18 vr11 • washington university wu-ftpd 2.4.2 beta18 vr12 • washington university wu-ftpd 2.4.2 beta18 vr13 • washington university wu-ftpd 2.4.2 beta18 vr14 • washington university wu-ftpd 2.4.2 beta18 vr15 • washington university wu-ftpd 2.4.2 vr16 • washington university wu-ftpd 2.4.2 vr17 • washington university wu-ftpd 2.5 • washington university wu-ftpd 2.6

References