CVE-2000-1013: High severity FreeBSD FreeBSD vulnerability
Published Nov 29, 2000
·Updated
The setlocale function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable.
Affected Software
12 affected components
FreeBSD FreeBSD=3.1
FreeBSD FreeBSD=3.5.1
FreeBSD FreeBSD=4.1
FreeBSD FreeBSD=3.0
FreeBSD FreeBSD=3.2
FreeBSD FreeBSD=4.2
FreeBSD FreeBSD=3.3
FreeBSD FreeBSD=4.0
FreeBSD FreeBSD=4.1.1
FreeBSD FreeBSD=3.4
FreeBSD FreeBSD=3.5
FreeBSD FreeBSD=5.0
Remediation
Event History
Nov 29, 2000
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-1013?
CVE-2000-1013 is considered a local privilege escalation vulnerability with a moderate severity rating.
2
How do I fix CVE-2000-1013?
Fix CVE-2000-1013 by upgrading to a patched version of FreeBSD that addresses this vulnerability.
3
Who is affected by CVE-2000-1013?
CVE-2000-1013 affects FreeBSD versions 5.0 and earlier, including 3.0 through 4.2.
4
What impact can CVE-2000-1013 have?
CVE-2000-1013 allows local users to read arbitrary files, potentially exposing sensitive information.
5
Is CVE-2000-1013 a remote vulnerability?
No, CVE-2000-1013 is a local vulnerability that requires physical or authorized access to the system.