peter bassill · operator
$ cve CVE-2000-0844 JSON

CVE-2000-0844 EXPLOIT

10.0
HIGH · CVSS 2.0 · EPSS 15.6% (pctl 97)

Patch early

A public exploit exists.

Description

Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.

Scoring

CVSS10.0 (HIGH, v2.0)
VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS15.63% — more likely to be exploited than 97% of all CVEs
WeaknessCWE-264
On CISA KEVno
Public exploityes
Published2000-11-14
Last modified2026-06-16

Affected (16)

VendorProduct
calderaopenlinux
calderaopenlinux ebuilder
calderaopenlinux eserver
conectivalinux
debiandebian linux
ibmaix
immuniximmunix
mandrakesoftmandrake linux
redhatlinux
sgiirix
slackwareslackware linux
sunsolaris
sunsunos
susesuse linux
trustixsecure linux
turbolinuxturbolinux

Public exploits

SourceTitleDate
exploit-dbGLIBC locale - Format Strings2003-01-15
exploit-dbGLIBC locale - bug mount2000-12-02
exploit-dbGLIBC - '/bin/su' Local Privilege Escalation2000-11-30
exploit-dbSolaris 2.6/7.0 - 'locale' Format Strings noexec stack Overflow2000-11-30
exploit-dbSolaris/SPARC 2.7 / 7 locale - Format String2000-11-20
exploit-dbSolaris 2.6/7.0 /locale - Subsystem Format String2000-11-02
exploit-dbSolaris 2.6/7.0 'eject' locale - Subsystem Format String2000-09-08
exploit-dbRedHat 6 GLIBC/locale - Subsystem Format String2000-09-06
exploit-dbImmunix OS 6.2 - LC glibc format string2000-09-04
exploit-dbLibc locale - Local Privilege Escalation (1)2000-09-04
exploit-dbLibc locale - Local Privilege Escalation (2)2000-09-04

References

→ the Explorer  ·  watch your stack  ·  NVD