medium4.6Public exploit code
CVE-2000-0976
Buffer overflow in xlib in XFree 3.3.x possibly allows local users to execute arbitrary commands via a long DISPLAY environment variable or a -display command …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- XFree86 3.3.5/3.3.6 - Xlib Display Buffer Overflow2000-10-12 · local · unix · Verified
Impact
Buffer overflow in xlib in XFree 3.3.x possibly allows local users to execute arbitrary commands via a long DISPLAY environment variable or a -display command line parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xfree86 Project | Xlib | Version 3.3x |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-10/0211.html
- http://www.iss.net/security_center/static/5751.php
- http://www.securityfocus.com/bid/1805
- http://archives.neohapsis.com/archives/bugtraq/2000-10/0211.html
- http://www.iss.net/security_center/static/5751.php
- http://www.securityfocus.com/bid/1805