CVE-2000-0844
28Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendepss 15%
de la publicación al arma0 días
Publicada en NVD22 ene
1ª PoC4 sept
probabilidad de explotación
15%top 4% de las CVE
explotación observada
noninguna fuente lo reporta
11 exploit(s) público(s)
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.
Productos afectados
n/a · n/aPoCs públicas encontradas — 11✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/20187exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/209exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/215exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/249exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/20185exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/20188exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/210exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/20186exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/197exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/20189exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/20190⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
ftp://patches.sgi.com/support/free/security/advisories/20000901-01-Phttp://archives.neohapsis.com/archives/bugtraq/2000-08/0436.htmlhttp://archives.neohapsis.com/archives/bugtraq/2000-08/0457.htmlhttp://archives.neohapsis.com/archives/bugtraq/2000-10/0427.htmlhttp://archives.neohapsis.com/archives/tru64/2000-q4/0000.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/5176http://www.calderasystems.com/support/security/advisories/CSSA-2000-030.0.txthttp://www.debian.org/security/2000/20000902http://www.novell.com/linux/security/advisories/adv5_draht_glibc_txt.htmlhttp://www.redhat.com/support/errata/RHSA-2000-057.htmlhttp://www.securityfocus.com/bid/1634http://www.turbolinux.com/pipermail/tl-security-announce/2000-September/000020.html