Format String Vulnerability in CFEngine Daemon by GNU
CVE-2000-0947

Currently unrated

Key Information:

Vendor
Gnu
Status
Cfengine
Vendor
CVE Published:
19 December 2000

Summary

The CFEngine daemon prior to version 1.6.0a11 contains a format string vulnerability, which could be exploited by an attacker to execute arbitrary commands. The vulnerability arises from improper handling of format characters in the CAUTH command, allowing malicious inputs to be sent to the daemon. This can potentially lead to severe security implications, including unauthorized access to system resources.

References

http://archives.neohapsis.com/archives/bugtraq/2000-10/00...
mailing-listx_refsource_BUGTRAQ
http://www.linux-mandrake.com/en/security/MDKSA-2000-061....
vendor-advisoryx_refsource_MANDRAKE
ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/...
vendor-advisoryx_refsource_NETBSD

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.