CVE-2000-0844

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-264

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Nov 14, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-08456.4kdebug daemon (kdebugd) in Digital Unix 4.0F allows remote attackers to read arbitrary files by specifying the full file name in the initialCVE-2000-08467.5Buffer overflow in Darxite 0.4 and earlier allows a remote attacker to execute arbitrary commands via a long username or password.CVE-2000-08477.5Buffer overflow in University of Washington c-client library (used by pine and other programs) allows remote attackers to execute arbitrary CVE-2000-084810.0Buffer overflow in IBM WebSphere web application server (WAS) allows remote attackers to execute arbitrary commands via a long Host: requesCVE-2000-08492.6Race condition in Microsoft Windows Media server allows remote attackers to cause a denial of service in the Windows Media Unicast Service vCVE-2000-08507.5Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending "$/FILENAME.ext" (where ext is CVE-2000-08514.6Buffer overflow in the Still Image Service in Windows 2000 allows local users to gain additional privileges via a long WM_USER message, aka CVE-2000-08527.2Multiple buffer overflows in eject on FreeBSD and possibly other OSes allows local users to gain root privileges.CVE-2000-08535.0YaBB Bulletin Board 9.1.2000 allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2000-085410.0When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msiCVE-2000-08555.0SunFTP build 9(1) allows remote attackers to cause a denial of service by connecting to the server and disconnecting before sending a newlinCVE-2000-08567.5Buffer overflow in SunFTP build 9(1) allows remote attackers to cause a denial of service or possibly execute arbitrary commands via a long
CVE-2000-0844: Critical severity, CVSS 10.0 | Vulnix