CVE-2000-0947: GNU Cfengine

High severity, CVSS 10.0. EPSS: 2.5% chance of exploitation in the next 30 days.

Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH command.

Affected products

• GNU Cfengine: version 1.5 only; version 1.5.3-4 only; version 1.6 only

Published 2000-12-19. Last modified 2026-09-23.