5

CVE-2000-0574: openbsd ftpd

CVSS: 5.0v2.0MediumModified
Published 19-07-2000Last modified 08-08-2024
Open JSON
Some data may be incomplete
  • 1 reference with an unsupported link type was hidden.

Vulnerability summary

CVE-2000-0574 is a medium (CVSS 5.0) vulnerability in openbsd ftpd. EPSS estimates a 58.87% chance of exploitation in the next 30 days, higher than 99.1% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
42/100
0100
Medium · default modelHow is this calculated?
CVSS score
5.0/10
010
Medium · v2.0 (NVD)
EPSS score
58.87%
0%100%
Critical · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1exploit-database

Timeline

  1. 19-07-2000
    PublishedVulnerability first disclosed.
  2. 08-08-2024
    Last modifiedVulnerability information updated.

Description

FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of service or execute arbitrary commands.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

58.87%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 58.87% on 18-09-2026

18-09-202618-10-2026
EPSS score
58.87%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • exploit-databaselocalbsdVerified

    OpenBSD - 'ftp' Local Overflow

    Maturity: weaponized

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Openbsd1 product
Washington_university1 product
  • wu-ftpd2.4.2_beta1 | 2.4.2_beta18 | 2.4.2_beta18_vr4 | 2.4.2_beta18_vr5 | 2.4.2_beta18_vr6 | 2.4.2_beta18_vr7 | 2.4.2_beta18_vr8 | 2.4.2_beta18_vr9 | 2.4.2_beta18_vr10 | 2.4.2_beta18_vr11 | 2.4.2_beta18_vr12 | 2.4.2_beta18_vr13 | 2.4.2_beta18_vr14 | 2.4.2_beta18_vr15 | 2.4.2_vr16 | 2.4.2_vr17 | 2.5 | 2.6

2 vendors · 2 products

References

6 links