CWE
264
Advisory Published
CVE Published
Updated

CVE-2000-0844

First published: Tue Nov 14 2000(Updated: )

Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
SGI IRIX=6.5.6
SGI IRIX=6.5.3f
SGI IRIX=6.5.1
Conectiva Linux=4.2
Conectiva Linux=4.1
Conectiva Linux=5.1
Immunix Immunix=6.2
SGI IRIX=6.4
SGI IRIX=6.5.2m
SGI IRIX=6.5.3
SGI IRIX=6.5.3m
SGI IRIX=6.5.8
Conectiva Linux=4.0es
Caldera Openlinux Ebuilder=3.0
SGI IRIX=6.5.4
SGI IRIX=6.3
Conectiva Linux=5.0
SGI IRIX=6.5
SGI IRIX=6.5.7
SGI IRIX=6.2
Conectiva Linux=4.0
Suse Suse Linux=6.2
IBM AIX=4.3.2
IBM AIX=4.3
Sun SunOS=5.3
Debian Debian Linux=2.3
Trustix Secure Linux=1.1
IBM AIX=4.2.1
Redhat Linux=5.1
Debian Debian Linux=2.2
Debian Debian Linux=2.1
IBM AIX=3.2.5
Mandrakesoft Mandrake Linux=7.0
Redhat Linux=6.1
IBM AIX=3.2.4
Slackware Slackware Linux=7.1
IBM AIX=4.1.4
IBM AIX=4.2
IBM AIX=4.1.5
Redhat Linux=6.2
Redhat Linux=5.0
Mandrakesoft Mandrake Linux=7.1
Trustix Secure Linux=1.0
Sun SunOS=5.7
Sun SunOS=5.5
Sun SunOS=5.8
Turbolinux Turbolinux=6.0.1
Caldera OpenLinux
Redhat Linux=5.2
Turbolinux Turbolinux=6.0
Turbolinux Turbolinux=6.0.2
Slackware Slackware Linux=7.0
Suse Suse Linux=6.1
Caldera Openlinux Eserver=2.3
IBM AIX=4.0
IBM AIX=4.1.1
Turbolinux Turbolinux=6.0.4
Sun SunOS=5.4
Suse Suse Linux=7.0
Suse Suse Linux=6.3
Sun SunOS=5.5.1
IBM AIX=4.1.2
Suse Suse Linux=6.4
Debian Debian Linux=2.0
IBM AIX=4.3.1
Turbolinux Turbolinux=6.0.3
Redhat Linux=6.0
IBM AIX=4.1
Sun SunOS=5.0
IBM AIX=4.1.3
IBM AIX=3.2
Sun Solaris=2.6
Sun SunOS=5.1
Sun SunOS=5.2

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203