CVE-2000-0844
HIGH 10.0EPSS 15.6%
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.
- CVSS v2.0 NVD
- 10.0 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 15.63% chance of exploitation in the next 30 days, 97th percentile
- Published
- 2001-01-22
- Updated
- 2024-08-08
ExploitDB entries (8)
- https://www.exploit-db.com/exploits/20190
- https://www.exploit-db.com/exploits/20189
- https://www.exploit-db.com/exploits/20188
- https://www.exploit-db.com/exploits/20187
- https://www.exploit-db.com/exploits/20186
- https://www.exploit-db.com/exploits/20185
- https://www.exploit-db.com/exploits/249
- https://www.exploit-db.com/exploits/215
Security advisories
- http://archives.neohapsis.com/archives/bugtraq/2000-08/0457.html
- http://www.securityfocus.com/bid/1634
- http://www.redhat.com/support/errata/RHSA-2000-057.html