CVE ID:	CVE-2000-0574
Description:	FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of service or execute arbitrary commands.
Test IDs:	1.3.6.1.4.1.25623.1.0.11391
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2000-0574 BugTraq ID: 1425 http://www.securityfocus.com/bid/1425 BugTraq ID: 1438 http://www.securityfocus.com/bid/1438 Bugtraq: 20000705 proftp advisory (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-07/0031.html Bugtraq: 20000706 ftpd and setproctitle() (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-07/0061.html Bugtraq: 20000710 opieftpd setproctitle() patches (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-07/0121.html Cert/CC Advisory: CA-2000-13 http://www.cert.org/advisories/CA-2000-13.html NETBSD Security Advisory: NetBSD-SA2000-009 ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-009.txt.asc