Lucene search

[email protected]CVE-2000-0993

HistoryJan 22, 2001 - 5:00 a.m.

CVE-2000-0993

2001-01-2205:00:00

[email protected]

web.nvd.nist.gov

bsd

libutil library

root privileges

format string vulnerability

cve-2000-0993

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as chpass or passwd.

Affected configurations

NVD

Node

freebsdfreebsdMatch3.2

freebsdfreebsdMatch3.3

freebsdfreebsdMatch3.4

freebsdfreebsdMatch3.5

freebsdfreebsdMatch4.0

netbsdnetbsdMatch1.4

netbsdnetbsdMatch1.4.1

netbsdnetbsdMatch1.4.2

openbsdopenbsdMatch2.3

openbsdopenbsdMatch2.4

openbsdopenbsdMatch2.5

openbsdopenbsdMatch2.6

openbsdopenbsdMatch2.7

CPENameOperatorVersion
freebsd:freebsdfreebsdeq3.2
freebsd:freebsdfreebsdeq3.3
freebsd:freebsdfreebsdeq3.4
freebsd:freebsdfreebsdeq3.5
freebsd:freebsdfreebsdeq4.0
netbsd:netbsdnetbsdeq1.4
netbsd:netbsdnetbsdeq1.4.1
netbsd:netbsdnetbsdeq1.4.2
openbsd:openbsdopenbsdeq2.3
openbsd:openbsdopenbsdeq2.4

CPE	Name	Operator	Version
freebsd:freebsd	freebsd	eq	3.2
freebsd:freebsd	freebsd	eq	3.3
freebsd:freebsd	freebsd	eq	3.4
freebsd:freebsd	freebsd	eq	3.5
freebsd:freebsd	freebsd	eq	4.0
netbsd:netbsd	netbsd	eq	1.4
netbsd:netbsd	netbsd	eq	1.4.1
netbsd:netbsd	netbsd	eq	1.4.2
openbsd:openbsd	openbsd	eq	2.3
openbsd:openbsd	openbsd	eq	2.4

Rows per page:

1-10 of 131

References

ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:58.chpass.asc

ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-015.txt.asc

marc.info/?l=bugtraq&m=97068555106135&w=2

www.openbsd.org/errata27.html#pw_error

www.securityfocus.com/bid/1744

exchange.xforce.ibmcloud.com/vulnerabilities/5339

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

Related for CVE-2000-0993

cert1 cvelist1 nvd1