CVE-2000-0573 — AI Deep Analysis Summary

🚨 **Essence**: Wu-ftpd 2.6.0 suffers from a **Remote Format String Overflow** in the `SITE EXEC` command.…

🛠️ **Root Cause**: The `SITE EXEC` function passes **user input directly** as the format string to `vsnprintf()`. ❌ This is a classic **Format String Vulnerability** (CWE-134), allowing memory corruption.

🖥️ **Affected**: **Wu-ftpd version 2.6.0**. 🌍 Widely used as the default FTP server on many **Unix and Linux distributions** at the time.

💀 **Attacker Capabilities**: Can execute **arbitrary system commands**. 🔑 Achieves **root-level access** (highest privilege), allowing full control over the system.

⚡ **Exploitation Threshold**: **Low**. 🌐 It is a **Remote** vulnerability. No authentication is explicitly required for the `SITE EXEC` vector in this context, making it easily exploitable over the network.

🔓 **Public Exploit**: **Yes**. 📜 Multiple advisories (RedHat, FreeBSD, Bugtraq) confirm active exploitation and public disclosure since 2000. The payload involves specific format strings like `%.f%.f%.f`.

🔍 **Self-Check**: Scan for **Wu-ftpd 2.6.0** services. 🧪 Test the `SITE EXEC` command with format string payloads (e.g., `%x%x%x`) to see if memory contents leak or if the service crashes.

🩹 **Official Fix**: **Yes**. 📄 Vendors like RedHat (RHSA-2000:039) and FreeBSD (FreeBSD-SA-00:29) released security advisories and patches to fix this flaw.

🚧 **No Patch Workaround**: Disable the `SITE EXEC` command if possible. 🛑 Restrict FTP access via firewall rules. ⚠️ However, given the age, **upgrading or replacing** the FTP server is the only true mitigation.

⏳ **Urgency**: **Historical Critical**. 📅 Published in 2000/2001.…