FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of service or execute arbitrary commands.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2000-07-06 21:00
Updated : 2008-09-10 12:05
NVD link : CVE-2000-0574
Mitre link : CVE-2000-0574
JSON object : View
CWE
Products Affected
washington_university
- wu-ftpd
openbsd
- ftpd