CVE-2000-0947

Published: Dec 19, 2000Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH command.

Affected (3)

Products: Gnu: Cfengine

Gnu

1 product

Cfengine

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Gnu Cfengine	Version 1.5.3-4
Gnu Cfengine	Version 1.5
Gnu Cfengine	Version 1.6 a10

References (10)

ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-013.txt.asc (unsafe URL)

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2000-10/0004.html

Source: cve@mitre.org

http://www.linux-mandrake.com/en/security/MDKSA-2000-061.php3?dis=7.1

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/1757

Source: cve@mitre.org

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/5630

Source: cve@mitre.org

ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-013.txt.asc (unsafe URL)