CVE-2001-0218 Format string vulnerability in mars_nwe 0.99.pl19 allows remote attackers to execute arbitrary commands.

HighCVSS 10.0 EPSS 3.5%

Published: 2001-05-07 07:00
Updated: 2026-06-17 00:53
Exploit status: No public exploit known

Sign in for asset impact Search another CVE

Description

Format string vulnerability in mars_nwe 0.99.pl19 allows remote attackers to execute arbitrary commands.

Affected products

Product	Affected versions	Fixed in
martin stover mars nwe	= 0.99_pl19	No fix listed

References

20010126 format string vulnerability in mars_nwe 0.99pl19 mailing-list patch
FreeBSD-SA-01:20 patch vendor-advisory
mars-nwe-format-string(6019) vdb-entry

CVSS v2.0

10.0 High

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Weakness & likelihood

EPSS (exploitation probability, 30 days): 3.53% (percentile 89.4)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.