high7.2Public exploit code
CVE-2000-0993
Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BSD chpass - 'pw_error(3)' Local Privilege Escalation2001-01-12 · local · bsd · Verified
Impact
Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as chpass or passwd.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Freebsd | Freebsd | Versions 3.2, 3.3, 3.4, 3.5, 4.0 |
| Netbsd | Netbsd | Versions 1.4, 1.4.1, 1.4.2 |
| Openbsd | Openbsd | Versions 2.3, 2.4, 2.5, 2.6, 2.7 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=97068555106135&w=2
- http://www.openbsd.org/errata27.html#pw_error
- http://www.securityfocus.com/bid/1744
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5339
- http://marc.info/?l=bugtraq&m=97068555106135&w=2
- http://www.openbsd.org/errata27.html#pw_error
- http://www.securityfocus.com/bid/1744
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5339