CVE-2000-0844

high · 10

Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.

CVSS

15.6%

EPSS (exploit prob.)

97th

EPSS percentile

2000-11-14

Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-264

Affected products

Vendor	Product	Affected versions
caldera	openlinux_ebuilder	3.0
immunix	immunix	6.2
conectiva	linux	4.0
conectiva	linux	4.0es
conectiva	linux	4.1
conectiva	linux	4.2
conectiva	linux	5.0
conectiva	linux	5.1
sgi	irix	6.2
sgi	irix	6.3
sgi	irix	6.4
sgi	irix	6.5
sgi	irix	6.5.1
sgi	irix	6.5.2m
sgi	irix	6.5.3
sgi	irix	6.5.3f
sgi	irix	6.5.3m
sgi	irix	6.5.4
sgi	irix	6.5.6
sgi	irix	6.5.7
sgi	irix	6.5.8
caldera	openlinux	all versions
caldera	openlinux_eserver	2.3
debian	debian_linux	2.0
debian	debian_linux	2.1
debian	debian_linux	2.2
debian	debian_linux	2.3
ibm	aix	3.2
ibm	aix	3.2.4
ibm	aix	3.2.5
ibm	aix	4.0
ibm	aix	4.1
ibm	aix	4.1.1
ibm	aix	4.1.2
ibm	aix	4.1.3
ibm	aix	4.1.4
ibm	aix	4.1.5
ibm	aix	4.2
ibm	aix	4.2.1
ibm	aix	4.3

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2000-0844