CVE-2000-0947
Medium
Elevated severity or exploit probability.
CVSS base
10.0
HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS — probability of exploitation (30 days)
2.5%
84.2th percentile
CISA KEV
Not listed
Weakness / dates
—
Published 2000-12-19 · modified 2026-09-23
CVSS breakdown
AV:N/AC:L/Au:N/C:C/I:C/A:C
| Attack Vector | N | Network |
| Attack Complexity | L | Low |
| Authentication | N | None |
| Confidentiality | C | Complete |
| Integrity | C | Complete |
| Availability | C | Complete |
Timeline
- 2000-12-19 — Published (NVD)
- 2026-09-23 — Last modified (NVD)
Description
Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH command.
Affected
References
- ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-013.txt.asc
- http://archives.neohapsis.com/archives/bugtraq/2000-10/0004.html
- http://www.linux-mandrake.com/en/security/MDKSA-2000-061.php3?dis=7.1
- http://www.securityfocus.com/bid/1757
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5630
- ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-013.txt.asc
- http://archives.neohapsis.com/archives/bugtraq/2000-10/0004.html
- http://www.linux-mandrake.com/en/security/MDKSA-2000-061.php3?dis=7.1
- http://www.securityfocus.com/bid/1757
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5630