CVE-2000-0844
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.
- EPSS
- 16% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- caldera:openlinux
- caldera:openlinux_ebuilder
- caldera:openlinux_eserver
- conectiva:linux
- debian:debian_linux
- ibm:aix
- immunix:immunix
- mandrakesoft:mandrake_linux
- redhat:linux
- sgi:irix
- slackware:slackware_linux
- sun:solaris
- sun:sunos
- suse:suse_linux
- trustix:secure_linux
- turbolinux:turbolinux
References
- ftp://patches.sgi.com/support/free/security/advisories/20000901-01-P
- http://archives.neohapsis.com/archives/bugtraq/2000-08/0436.html
- http://archives.neohapsis.com/archives/bugtraq/2000-08/0457.html
- http://archives.neohapsis.com/archives/bugtraq/2000-10/0427.html
- http://archives.neohapsis.com/archives/tru64/2000-q4/0000.html