CVE-2000-0699

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via format strings in the PASS command.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Oct 20, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-07005.0Cisco Gigabit Switch Routers (GSR) with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.2(15)GS1A up to 11.2(19)GS0.2 and some CVE-2000-07014.6The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows local users to gain prCVE-2000-07027.2The net.init rc script in HP-UX 11.00 (S008net.init) allows local users to overwrite arbitrary files via a symlink attack that points from /CVE-2000-07037.2suidperl (aka sperl) does not properly cleanse the escape sequence "~!" before calling /bin/mail to send an error report, which allows localCVE-2000-070410.0Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JS_OPEN, JS_MKDIR, or JS_FILE_INFOCVE-2000-07055.0ntop running in web mode allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2000-070610.0Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands.CVE-2000-07077.5PCCS MySQLDatabase Admin Tool Manager 1.2.4 and earlier installs the file dbconnect.inc within the web root, which allows remote attackers tCVE-2000-07085.0Buffer overflow in Pragma Systems TelnetServer 2000 version 4.0 allows remote attackers to cause a denial of service via a long series of nuCVE-2000-07095.0The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some compoCVE-2000-07105.0The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the servCVE-2000-07117.5Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attacker
CVE-2000-0699: Critical severity, CVSS 10.0 | Vulnix