high7.2Public exploit code
CVE-2000-0994
Format string vulnerability in OpenBSD fstat program (and possibly other BSD-based operating systems) allows local users to gain root privileges via the PWD en…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- OpenBSD 2.x - 'fstat' Format String2000-10-04 · local · openbsd · Verified
Impact
Format string vulnerability in OpenBSD fstat program (and possibly other BSD-based operating systems) allows local users to gain root privileges via the PWD environmental variable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openbsd | Openbsd | Versions 2.3, 2.4, 2.5, 2.6, 2.7 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=97068555106135&w=2
- http://www.securityfocus.com/bid/1746
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5338
- http://marc.info/?l=bugtraq&m=97068555106135&w=2
- http://www.securityfocus.com/bid/1746
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5338