CVE-2000-0573
HP-UX - Remote Code Execution via wu-ftpd SITE EXEC Format String
Title source: llmExploitation Summary
EIP tracks 8 public exploits for CVE-2000-0573.
PoCs published by Metasploit, qitest1, justme, including Metasploit module exploits/multi/ftp/wuftpd_site_exec_format.
AI-analyzed exploit summary This Metasploit module exploits a format string vulnerability in wu-ftpd versions older than 2.6.1 via SITE EXEC/INDEX commands, allowing arbitrary code execution. It includes automatic targeting and payload delivery mechanisms.
Description
The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command.
Exploits (8)
This Metasploit module exploits a format string vulnerability in wu-ftpd versions older than 2.6.1 via SITE EXEC/INDEX commands, allowing arbitrary code execution. It includes automatic targeting and payload delivery mechanisms.
This exploit targets a format string vulnerability in BeroFTPD 1.3.4(1) derived from wuftpd, allowing remote code execution via the SITE EXEC command. It uses a combination of shellcode and format string manipulation to achieve arbitrary code execution.
The writeup describes a format string vulnerability in Washington University ftp daemon (wu-ftpd) affecting the SITE EXEC and SITE INDEX commands. The vulnerability allows remote attackers to execute arbitrary commands as root due to improper input validation.
This exploit targets a format string vulnerability in wu-ftpd (CVE-2000-0573) to achieve remote code execution. It constructs a malicious format string to overwrite memory addresses and includes SPARC shellcode for privilege escalation.
This exploit targets a format string vulnerability in WU-FTPD 2.6.0, allowing remote code execution via the SITE EXEC command. It includes shellcode for both Linux and FreeBSD to spawn a shell, bypassing chroot restrictions.
This exploit targets a format string vulnerability in the SITE EXEC command of wu-ftpd 2.6.0(1), allowing remote code execution as root. It leverages shellcode injection and precise memory manipulation to overwrite return addresses and execute arbitrary commands.
This exploit targets a format string vulnerability in the SITE EXEC command of wu-ftpd 2.6.0, allowing remote code execution as root. It includes shellcode for various Linux and FreeBSD systems, leveraging the vulnerability to overwrite stack data and redirect execution flow.
This Metasploit module exploits a format string vulnerability in WU-FTPD versions older than 2.6.1 via SITE EXEC or SITE INDEX commands, allowing arbitrary code execution. It includes automatic targeting and payload delivery mechanisms.