NetSight
IP …
critical10.0Public exploit code

CVE-2000-0844

Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitr…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.

Affected products

VendorProductAffected versions
CalderaOpenlinux Ebuilder
Version 3.0
ImmunixImmunix
Version 6.2
ConectivaLinux
Versions 4.0, 4.0es, 4.1, 4.2, 5.0, 5.1
SgiIrix
Versions 6.2, 6.3, 6.4, 6.5, 6.5.1, 6.5.2m
CalderaOpenlinux
All versions
CalderaOpenlinux Eserver
Version 2.3
DebianDebian Linux
Versions 2.0, 2.1, 2.2, 2.3
IbmAix
Versions 3.2, 3.2.4, 3.2.5, 4.0, 4.1, 4.1.1
MandrakesoftMandrake Linux
Versions 7.0, 7.1
RedhatLinux
Versions 5.0, 5.1, 5.2, 6.0, 6.1, 6.2
SlackwareSlackware Linux
Versions 7.0, 7.1
SunSolaris
Version 2.6

Weakness classification

CWE-264

References