high7.2
CVE-2000-0963
Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFO_DIRS.
Impact
Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFO_DIRS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Immunix | Immunix | Versions 6.2, 7.0_beta |
| Freebsd | Freebsd | Versions 3.4, 3.5.1, 4.0, 4.1, 4.1.1 |
| Redhat | Linux | Versions 6.2, 7.0 |
| Invisible-Island | Ncurses | before 5.6 |
References
- NVD record
- CVE.org record
- http://www.calderasystems.com/support/security/advisories/CSSA-2000-036.0.txt
- http://www.securityfocus.com/archive/1/138550
- http://www.securityfocus.com/bid/1142
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44487
- http://www.calderasystems.com/support/security/advisories/CSSA-2000-036.0.txt
- http://www.securityfocus.com/archive/1/138550
- http://www.securityfocus.com/bid/1142
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44487