CVE:CVE-2000-0947
CNNVD:CNNVD-200012-102
GNU CFEngine 1.6.0a11之前版本的cfd守护程序存在格式化字符串漏洞。攻击者借助CAUTH命令的格式化字符执行任意命令。
solution:Upgrade gnu cfengine to a higher version than 1.5,1.5.3-4,1.6:a10,and avoid the version 1.5,1.5.3-4,1.6:a10