Unscored CVE-2000-0947 EUVD-2000-0934GHSA-32j9-px4f-v6vv

Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format charact…

Published Jan 22, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH command.

References

20001002 Very probable remote root vulnerability in cfengine mailing-list
MDKSA-2000:061 vendor-advisory
cfengine-cfd-format-string(5630) vdb-entry
1757 vdb-entry