PT-2000-1921 · Freebsd · Freebsd

Published 2000-12-11 · Updated 2017-10-10 · CVE-2000-1011

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD versions 5.0 and earlier

Description A buffer overflow issue exists in the catopen() function, potentially allowing local users to gain root privileges by exploiting a long environmental variable. This issue may also affect other operating systems.

Recommendations For FreeBSD versions 5.0 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2000-1011

Affected Products

Freebsd

References · 4

• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:53.catopen.asc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-1011 · Security Note
• http://osvdb.org/6070 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5638 · Note