CVE-2000-0699 — HIGH (10.0)

Vulnerability Description

Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via format strings in the PASS command.

CVSS Score

10.0

HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE

Affected Products

Vendor	Product	Versions
Hp	Hp-Ux	10.20

References

http://archives.neohapsis.com/archives/bugtraq/2000-08/0028.htmlVendor Advisory
http://www.securityfocus.com/bid/1560Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-08/0028.htmlVendor Advisory
http://www.securityfocus.com/bid/1560Vendor Advisory

FAQ

What is CVE-2000-0699?

CVE-2000-0699 is a vulnerability with a CVSS score of 10.0 (HIGH). Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via format strings in the PASS command.

How severe is CVE-2000-0699?

CVE-2000-0699 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2000-0699?

Check the references section above for vendor advisories and patch information. Affected products include: Hp Hp-Ux.