PT-2000-1767 · Ibm+12 · Aix+14

Publicado 2000-11-14 · Atualizado 2018-10-30 · CVE-2000-0844

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned.

Description The issue concerns the locale subsystem on Unix systems, where certain functions do not properly cleanse user-injected format strings. This allows local attackers to execute arbitrary commands via functions such as gettext() and catopen().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2000-0844

Produtos afetados

Aix

Debian

Immunix

Irix

Linux

Mandrake Linux

Openlinux

Openlinux Ebuilder

Openlinux Eserver

Secure Linux

Slackware Linux

Solaris

Sunos

Suse Linux

Turbolinux

Referências · 24

• 🔥 https://exploit-db.com/exploits/210 · Exploit
• 🔥 https://exploit-db.com/exploits/197 · Exploit
• 🔥 https://exploit-db.com/exploits/20189 · Exploit
• 🔥 http://securityfocus.com/bid/1634 · Exploit
• 🔥 https://exploit-db.com/exploits/20186 · Exploit
• 🔥 https://exploit-db.com/exploits/20187 · Exploit
• 🔥 https://exploit-db.com/exploits/20185 · Exploit
• 🔥 https://exploit-db.com/exploits/249 · Exploit
• 🔥 https://exploit-db.com/exploits/209 · Exploit
• 🔥 https://exploit-db.com/exploits/20190 · Exploit
• 🔥 https://exploit-db.com/exploits/20188 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2000-08/0457.html · Exploit
• 🔥 https://exploit-db.com/exploits/215 · Exploit
• http://archives.neohapsis.com/archives/tru64/2000-q4/0000.html · Nota
• http://calderasystems.com/support/security/advisories/CSSA-2000-030.0.txt · Nota