CVE-2000-0947

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.53%

Published

Dec 19, 2000

Modified

Jun 16, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH command.

Affected Products (3)

gnu · cfenginevulnerable

References (10)

ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-013.txt.asc

http://archives.neohapsis.com/archives/bugtraq/2000-10/0004.html

http://www.linux-mandrake.com/en/security/MDKSA-2000-061.php3?dis=7.1

PatchVendor Advisory

http://www.securityfocus.com/bid/1757

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/5630

ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-013.txt.asc

http://archives.neohapsis.com/archives/bugtraq/2000-10/0004.html

http://www.linux-mandrake.com/en/security/MDKSA-2000-061.php3?dis=7.1

PatchVendor Advisory

http://www.securityfocus.com/bid/1757

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/5630

KEV Catalog EPSS Scores Vendors All CVEs