CVE-2000-0573: Critical severity HPE HP-UX vulnerability
Published Jul 7, 2000
·Updated
The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command.
Affected Software
1 affected component
HPE HP-UX=11.00
Remediation
Patch Available
Event History
Jul 7, 2000
CVE Published
04:00 AM
May 7, 2001
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-0573?
CVE-2000-0573 is classified as a high severity vulnerability due to the potential for remote command execution.
2
How do I fix CVE-2000-0573?
To fix CVE-2000-0573, upgrade to a newer version of wu-ftpd that does not contain this vulnerability.
3
What software is affected by CVE-2000-0573?
CVE-2000-0573 affects wu-ftpd version 2.6.0 and earlier, specifically on HP-UX 11.00.
4
What types of attacks can CVE-2000-0573 facilitate?
CVE-2000-0573 can facilitate arbitrary command execution attacks through the SITE EXEC command.
5
Is there a known exploit for CVE-2000-0573?
Yes, there are known exploits available for CVE-2000-0573 that target vulnerable versions of wu-ftpd.