← back
CVE-2000-0844

CVE-2000-0844

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 15%
from disclosure to weapon0 days
Published on NVDJan 22
1st PoCSep 4
exploitation probability
15%top 4% of all CVEs
observed exploitation
nono source reports it
11 public exploit(s)
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.
Affected products
n/a · n/a
public PoCs found — 11✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/20187exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/209exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/215exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/249exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/20185exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/20188exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/210exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/20186exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/197exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/20189exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/20190
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
ftp://patches.sgi.com/support/free/security/advisories/20000901-01-Phttp://archives.neohapsis.com/archives/bugtraq/2000-08/0436.htmlhttp://archives.neohapsis.com/archives/bugtraq/2000-08/0457.htmlhttp://archives.neohapsis.com/archives/bugtraq/2000-10/0427.htmlhttp://archives.neohapsis.com/archives/tru64/2000-q4/0000.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/5176http://www.calderasystems.com/support/security/advisories/CSSA-2000-030.0.txthttp://www.debian.org/security/2000/20000902http://www.novell.com/linux/security/advisories/adv5_draht_glibc_txt.htmlhttp://www.redhat.com/support/errata/RHSA-2000-057.htmlhttp://www.securityfocus.com/bid/1634http://www.turbolinux.com/pipermail/tl-security-announce/2000-September/000020.html