CVE-2000-0844
HIGH 10.0EPSS 15.3%
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.
- CVSS v2.0
- 10.0 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 15.35% chance of exploitation in the next 30 days, 97th percentile
- Published
- 2001-01-22
- Updated
- 2024-08-08
Proof-of-concept exploits (1)
ExploitDB entries (8)
- https://www.exploit-db.com/exploits/20190
- https://www.exploit-db.com/exploits/20189
- https://www.exploit-db.com/exploits/20188
- https://www.exploit-db.com/exploits/20187
- https://www.exploit-db.com/exploits/20186
- https://www.exploit-db.com/exploits/20185
- https://www.exploit-db.com/exploits/249
- https://www.exploit-db.com/exploits/215