Core Security Technologies Advisory ID: CORE-2004-0714 – Cfengine is susceptible to multiple vulnerabilities. Two were found in cfservd, a daemon which acts as both a file server and a remote cfagent executor. This daemon authenticates requests from the network and processes them. If exploited, the first vulnerability allows an attacker to execute arbitrary code with those privileges of root. The second vulnerability allows an attacker to crash the server, denying service to further requests. These vulnerabilities are present in versions 2.0.0 to 2.1.7p1 of cfservd.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33994/CORE-2004-0714.txt
Source: https://packetstormsecurity.com/files/33994/Core-Security-Technologies-Advisory-2004.0714.html