CVE-2000-0574
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
35Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 59%
from disclosure to weapon531 days
Published on NVDJul 19
1st PoC+531d
FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of service or execute arbitrary commands.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/396⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-009.txt.aschttp://archives.neohapsis.com/archives/bugtraq/2000-07/0031.htmlhttp://archives.neohapsis.com/archives/bugtraq/2000-07/0061.htmlhttp://archives.neohapsis.com/archives/bugtraq/2000-07/0121.htmlhttp://www.cert.org/advisories/CA-2000-13.htmlhttp://www.securityfocus.com/bid/1425http://www.securityfocus.com/bid/1438