CVE-2000-0994

CVE-2000-0994 describes a local, format-string vulnerability in OpenBSD’s fstat (and potentially other BSD-based systems) that allows a non-authenticated user to gain root privileges via the PWD environment variable. The root cause is a format-string flaw in fstat that mishandles the PWD value, e...