Lucene search
HistoryJan 22, 2001 - 5:00 a.m.
CVE-2000-1010
openbsd
talkd
format string vulnerability
remote attack
arbitrary commands
cve-2000-1010.
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.6 High
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.5%
Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via a user name that contains format characters.
Affected configurations
Node
openbsdopenbsdMatch2.3
ORopenbsdopenbsdMatch2.4
ORopenbsdopenbsdMatch2.5
ORopenbsdopenbsdMatch2.6
ORopenbsdopenbsdMatch2.7
ORredhatlinuxMatch5.0
ORredhatlinuxMatch5.1
ORredhatlinuxMatch5.2alpha
ORredhatlinuxMatch5.2i386
ORredhatlinuxMatch5.2sparc
Related
securityvulns
securityvulns
Security Update: [CSSA-2002-SCO.42] UnixWare 7.1.1 Open UNIX 8.0.0 : in.talkd format string vulnerabilities
2002-11-14 00:00:00
IRIX talkd vulnerability
2002-06-12 00:00:00
cvelist
cvelist
CVE-2000-1010
2001-01-22 05:00:00
nvd
nvd
CVE-2000-1010
2000-12-11 05:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.6 High
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.5%
Related for CVE-2000-1010