First published: Fri Jul 07 2000(Updated: )
The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
HPE HP-UX | =11.00 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2000-0573 is classified as a high severity vulnerability due to the potential for remote command execution.
To fix CVE-2000-0573, upgrade to a newer version of wu-ftpd that does not contain this vulnerability.
CVE-2000-0573 affects wu-ftpd version 2.6.0 and earlier, specifically on HP-UX 11.00.
CVE-2000-0573 can facilitate arbitrary command execution attacks through the SITE EXEC command.
Yes, there are known exploits available for CVE-2000-0573 that target vulnerable versions of wu-ftpd.