← Vulnerability feed

Vulnerability record · CVE-2000-0947 · published 19 December 2000

CVE-2000-0947: Gnu cfengine vulnerability

Gnu · Cfengine

Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH command.

10.0 CVSS 2.0 High EPSS 2.5% · top 15.7%
10.0CVSS 2.0 base score
2.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
10References
23 Sep 2026Last modified by NVD

Description

Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH command.

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-013.txt.asc
http://archives.neohapsis.com/archives/bugtraq/2000-10/0004.html
http://www.linux-mandrake.com/en/security/MDKSA-2000-061.php3?dis=7.1 PatchVendor Advisory
http://www.securityfocus.com/bid/1757 PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5630
ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-013.txt.asc
http://archives.neohapsis.com/archives/bugtraq/2000-10/0004.html
http://www.linux-mandrake.com/en/security/MDKSA-2000-061.php3?dis=7.1 PatchVendor Advisory
http://www.securityfocus.com/bid/1757 PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5630

Track CVE-2000-0947 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2004-1701Gnu cfengine vulnerabilityHeap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 allows remote attackers to execute arbitra…EPSS 20%7.5CVE-2003-0849Gnu cfengine vulnerabilityBuffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers to execute arbitrary code via certain packets with modified length val…EPSS 11%5.0CVE-2004-1702Gnu cfengine vulnerabilityThe AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 does not properly check the return value of the ReceiveTransaction funct…EPSS 2.4%2.1CVE-2005-2960Gnu cfengine vulnerabilitycfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in, a different vulner…EPSS 0.43%2.1CVE-2005-3137Gnu cfengine vulnerabilityThe (1) cfmailfilter and (2) cfcron.in files for cfengine 1.6.5 allow local users to overwrite arbitrary files via a symlink attack on temporary file…EPSS 0.43%

Source: NIST National Vulnerability Database (record CVE-2000-0947), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.