critical10.0Public exploit code
CVE-2000-0573
The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary comma…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WU-FTPD 2.4.2/2.5 .0/2.6.0 - Remote Format String Stack Overwrite (3)2001-05-04 · remote · linux_x86 · Verified
- WU-FTPD 2.4.2/2.5 .0/2.6.0 - Remote Format String Stack Overwrite (2)2000-09-26 · remote · linux · Verified
- WU-FTPD 2.4.2/2.5 .0/2.6.0 - Remote Format String Stack Overwrite (1)1999-10-15 · remote · unix · Verified
- WU-FTPD - Site EXEC/INDEX Format String (Metasploit)2010-11-30 · remote · linux · Verified
- BeroFTPD 1.3.4(1) (Linux x86) - Remote Code Execution2001-05-08 · remote · linux_x86 · Verified
- WU-FTPD 2.6.0 - Remote Format Strings2001-01-03 · remote · solaris · Verified
- WU-FTPD 2.6.0 - Remote Command Execution2000-11-21 · remote · multiple · Verified
Impact
The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Hp-Ux | Version 11.00 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-06/0244.html
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0017.html
- http://marc.info/?l=bugtraq&m=96171893218000&w=2
- http://marc.info/?l=bugtraq&m=96179429114160&w=2
- http://marc.info/?l=bugtraq&m=96299933720862&w=2
- http://www.calderasystems.com/support/security/advisories/CSSA-2000-020.0.txt
- http://www.cert.org/advisories/CA-2000-13.html
- http://www.redhat.com/support/errata/RHSA-2000-039.html
- http://www.securityfocus.com/bid/1387
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000623091822.3321.qmail%40fiver.freemessage.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/4773
- http://archives.neohapsis.com/archives/bugtraq/2000-06/0244.html
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0017.html
- http://marc.info/?l=bugtraq&m=96171893218000&w=2
- http://marc.info/?l=bugtraq&m=96179429114160&w=2
- http://marc.info/?l=bugtraq&m=96299933720862&w=2
- http://www.calderasystems.com/support/security/advisories/CSSA-2000-020.0.txt
- http://www.cert.org/advisories/CA-2000-13.html
- http://www.redhat.com/support/errata/RHSA-2000-039.html
- http://www.securityfocus.com/bid/1387
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000623091822.3321.qmail%40fiver.freemessage.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/4773