CVE-2000-0844
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 16%
from disclosure to weaponsame day
Published on NVDJan 22
1st PoCSep 4
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.
Affected products
n/a · n/apublic PoCs found — 11✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/209exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/197exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/20189exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/20190exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/20187exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/215exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/249exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/20186exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/20185exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/20188exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/210⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
ftp://patches.sgi.com/support/free/security/advisories/20000901-01-Phttp://archives.neohapsis.com/archives/bugtraq/2000-08/0436.htmlhttp://archives.neohapsis.com/archives/bugtraq/2000-08/0457.htmlhttp://archives.neohapsis.com/archives/bugtraq/2000-10/0427.htmlhttp://archives.neohapsis.com/archives/tru64/2000-q4/0000.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/5176http://www.calderasystems.com/support/security/advisories/CSSA-2000-030.0.txthttp://www.debian.org/security/2000/20000902http://www.novell.com/linux/security/advisories/adv5_draht_glibc_txt.htmlhttp://www.redhat.com/support/errata/RHSA-2000-057.htmlhttp://www.securityfocus.com/bid/1634http://www.turbolinux.com/pipermail/tl-security-announce/2000-September/000020.html