Lucene search

[email protected]CVE-2000-0763

HistoryOct 20, 2000 - 4:00 a.m.

CVE-2000-0763

2000-10-2004:00:00

[email protected]

web.nvd.nist.gov

cve-2000-0763

xlockmore

xlockf

root privileges

format strings

local user

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

0.4%

JSON

xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privileges via the -d option.

Affected configurations

NVD

Node

david_bagleyxlockMatch4.16

david_bagleyxlockMatch4.16.1

CPENameOperatorVersion
david_bagley:xlockdavid bagley xlockeq4.16
david_bagley:xlockdavid bagley xlockeq4.16.1

CPE	Name	Operator	Version
david_bagley:xlock	david bagley xlock	eq	4.16
david_bagley:xlock	david bagley xlock	eq	4.16.1

References

archives.neohapsis.com/archives/bugtraq/2000-08/0212.html

archives.neohapsis.com/archives/bugtraq/2000-08/0294.html

archives.neohapsis.com/archives/freebsd/2000-08/0340.html

www.debian.org/security/2000/20000816

www.securityfocus.com/bid/1585

www.securityfocus.com/templates/archive.pike?list=1&msg=20000815231724.A14694%40subterrain.net

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

0.4%

JSON

Related for CVE-2000-0763

cvelist1 nvd1