CVE-2000-0947

Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH command.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2000-12-19

Last modified

2024-08-08

Affected products

• Cfengine (Gnu)

References

• http://archives.neohapsis.com/archives/bugtraq/2000-10/0004.html
• http://www.linux-mandrake.com/en/security/MDKSA-2000-061.php3?dis=7.1
• http://www.securityfocus.com/bid/1757
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5630