CVE-2000-0844
28Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendepss 15%
da publicação à arma0 dias
Publicada no NVD22 de jan.
1ª PoC4 de set.
probabilidade de exploração
15%top 4% das CVEs
exploração observada
nãonenhuma fonte reporta
11 exploit(s) público(s)
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 11✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/20187exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/209exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/215exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/249exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/20185exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/20188exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/210exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/20186exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/197exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/20189exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/20190⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
ftp://patches.sgi.com/support/free/security/advisories/20000901-01-Phttp://archives.neohapsis.com/archives/bugtraq/2000-08/0436.htmlhttp://archives.neohapsis.com/archives/bugtraq/2000-08/0457.htmlhttp://archives.neohapsis.com/archives/bugtraq/2000-10/0427.htmlhttp://archives.neohapsis.com/archives/tru64/2000-q4/0000.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/5176http://www.calderasystems.com/support/security/advisories/CSSA-2000-030.0.txthttp://www.debian.org/security/2000/20000902http://www.novell.com/linux/security/advisories/adv5_draht_glibc_txt.htmlhttp://www.redhat.com/support/errata/RHSA-2000-057.htmlhttp://www.securityfocus.com/bid/1634http://www.turbolinux.com/pipermail/tl-security-announce/2000-September/000020.html