PT-2000-1267 · Xfree86 · Xfree86

Published 2000-04-16 · Updated 2008-09-10 · CVE-2000-0285

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions XFree86 versions 3.3.x

Description A buffer overflow issue allows local users to execute arbitrary commands by providing a long -xkbmap parameter.

Recommendations For XFree86 versions 3.3.x, consider restricting access to the -xkbmap parameter to minimize the risk of exploitation until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2000-0285

Affected Products

Xfree86

References · 3

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2000-04/0076.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0285 · Security Note
• http://securityfocus.com/bid/1306 · Note