CVE-2000-0844: Critical severity SGI IRIX vulnerability
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0844?
CVE-2000-0844 has been classified as a medium severity vulnerability due to its potential to allow local attackers to execute arbitrary commands.
How do I fix CVE-2000-0844?
To fix CVE-2000-0844, users should upgrade to the latest version of the affected software that contains the necessary patches.
What systems are affected by CVE-2000-0844?
CVE-2000-0844 affects various versions of SGI IRIX, Conectiva Linux, Caldera OpenLinux, IBM AIX, and several other Unix-like operating systems.
How does CVE-2000-0844 exploit user-injected format strings?
CVE-2000-0844 exploits vulnerabilities in functions like gettext and catopen by not properly cleansing user-injected format strings.
Is CVE-2000-0844 still a threat today?
While CVE-2000-0844 is older, it remains a threat if affected systems have not been patched or upgraded.