CVE-2000-0573

N/A

Published: May 7, 2001 at 04:00 AM UTC

Updated: June 16, 2026 at 09:52 PM UTC

1 product affected across 1 vendorHP Ux

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 96%

Description

The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

HP Ux · HP

95%

11.00

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (14)

Vendor Advisoryx_refsource_FREEBSD

Source: [email protected]

ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:29.wu-ftpd.asc.v1.1

Third Party Advisoryx_refsource_AUSCERT

Source: [email protected]

ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-2000.02

Vendor Advisoryx_refsource_NETBSD

Source: [email protected]

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2000-009.txt.asc