PT-2000-1767 · Ibm+12 · Aix+14

Published 2000-11-14 · Updated 2018-10-30 · CVE-2000-0844

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned.

Description The issue concerns the locale subsystem on Unix systems, where certain functions do not properly cleanse user-injected format strings. This allows local attackers to execute arbitrary commands via functions such as gettext() and catopen().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2000-0844

Affected Products

Aix

Debian

Immunix

Irix

Linux

Mandrake Linux

Openlinux

Openlinux Ebuilder

Openlinux Eserver

Secure Linux

Slackware Linux

Solaris

Sunos

Suse Linux

Turbolinux

References · 24

• 🔥 https://exploit-db.com/exploits/210 · Exploit
• 🔥 https://exploit-db.com/exploits/197 · Exploit
• 🔥 https://exploit-db.com/exploits/20189 · Exploit
• 🔥 http://securityfocus.com/bid/1634 · Exploit
• 🔥 https://exploit-db.com/exploits/20186 · Exploit
• 🔥 https://exploit-db.com/exploits/20187 · Exploit
• 🔥 https://exploit-db.com/exploits/20185 · Exploit
• 🔥 https://exploit-db.com/exploits/249 · Exploit
• 🔥 https://exploit-db.com/exploits/209 · Exploit
• 🔥 https://exploit-db.com/exploits/20190 · Exploit
• 🔥 https://exploit-db.com/exploits/20188 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2000-08/0457.html · Exploit
• 🔥 https://exploit-db.com/exploits/215 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0844 · Security Note
• http://archives.neohapsis.com/archives/tru64/2000-q4/0000.html · Note