CVE-2000-0573

The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command.

Date published : 2001-05-07

ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-2000.02

http://www.securityfocus.com/bid/1387