critical10.0
CVE-2000-0947
Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH com…
Impact
Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnu | Cfengine | Versions 1.5, 1.5.3-4, 1.6 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-10/0004.html
- http://www.linux-mandrake.com/en/security/MDKSA-2000-061.php3?dis=7.1
- http://www.securityfocus.com/bid/1757
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5630
- http://archives.neohapsis.com/archives/bugtraq/2000-10/0004.html
- http://www.linux-mandrake.com/en/security/MDKSA-2000-061.php3?dis=7.1
- http://www.securityfocus.com/bid/1757
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5630