PT-2000-1908 · Top · Top

Published 2000-12-11 · Updated 2008-09-05 · CVE-2000-0998

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions top (affected versions not specified)

Description The issue is related to a format string vulnerability in the top program. This vulnerability allows local attackers to gain root privileges via the "kill" or "renice" function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2000-0998

Affected Products

Top

References · 6

• 🔥 https://exploit-db.com/exploits/20377 · Exploit
• 🔥 https://exploit-db.com/exploits/20378 · Exploit
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:62.top.v1.1.asc · Vendor Advisory
• http://securityfocus.com/bid/1895 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-0998 · Security Note
• ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch · Note