CVE-2000-1010: Critical severity redhat Linux vulnerability

Published Dec 11, 2000

Updated

Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via a user name that contains format characters.

Affected Software

10 affected components

redhat Linux=5.1

redhat Linux=5.2

redhat Linux=5.0

OpenBSD OpenBSD=2.7

OpenBSD OpenBSD=2.4

OpenBSD OpenBSD=2.6

OpenBSD OpenBSD=2.5

OpenBSD OpenBSD=2.3

Remediation

Patch Available

http://www.securityfocus.com/bid/1764

Event History

Dec 11, 2000

CVE Published

05:00 AM

Jan 22, 2001

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-1010?

CVE-2000-1010 is considered a critical vulnerability due to the potential for remote command execution.

How do I fix CVE-2000-1010?

To fix CVE-2000-1010, you should update to the latest version of the affected software that addresses this vulnerability.

What software is affected by CVE-2000-1010?

CVE-2000-1010 affects talkd in OpenBSD and potentially other BSD-based operating systems, including multiple versions of Red Hat Linux.

What is the nature of the CVE-2000-1010 vulnerability?

The nature of CVE-2000-1010 is a format string vulnerability that allows remote attackers to execute arbitrary commands.

Can CVE-2000-1010 be exploited remotely?

Yes, CVE-2000-1010 can be exploited remotely by attackers through specially crafted user names containing format characters.