CVE-2000-0574

medium · 5

FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of service or execute arbitrary commands.

CVSS

58.9%

EPSS (exploit prob.)

99th

EPSS percentile

2000-07-07

Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

Vendor	Product	Affected versions
openbsd	ftpd	5.51
openbsd	ftpd	5.60
washington_university	wu-ftpd	2.4.2_beta1
washington_university	wu-ftpd	2.4.2_beta18
washington_university	wu-ftpd	2.4.2_beta18_vr4
washington_university	wu-ftpd	2.4.2_beta18_vr5
washington_university	wu-ftpd	2.4.2_beta18_vr6
washington_university	wu-ftpd	2.4.2_beta18_vr7
washington_university	wu-ftpd	2.4.2_beta18_vr8
washington_university	wu-ftpd	2.4.2_beta18_vr9
washington_university	wu-ftpd	2.4.2_beta18_vr10
washington_university	wu-ftpd	2.4.2_beta18_vr11
washington_university	wu-ftpd	2.4.2_beta18_vr12
washington_university	wu-ftpd	2.4.2_beta18_vr13
washington_university	wu-ftpd	2.4.2_beta18_vr14
washington_university	wu-ftpd	2.4.2_beta18_vr15
washington_university	wu-ftpd	2.4.2_vr16
washington_university	wu-ftpd	2.4.2_vr17
washington_university	wu-ftpd	2.5
washington_university	wu-ftpd	2.6

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2000-0574