CVE-2000-0901

CVE-2000-0901

Medium · published December 19, 2000

CVSS v2.0
4.6
EPSS
1%
Percentile
61.3
In the wild
Unconfirmed
What it is

Format string vulnerability in screen 3.9.5 and earlier allows local users to gain root privileges via format characters in the vbell_msg initialization variable.

The record
Technical detail
CVSS v2.0
4.6 · MEDIUM
Vector
AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSS v4.0
Not supplied
EPSS
0.00970 · 61.3th percentile
Published
2000-12-19T10:00Z
Affected products (3)
ProductVersionsFixed in
juergen/weigert_screenall versions—
juergen/weigert_screenall versions—
juergen/weigert_screenall versions—
References (16)
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:46.screen.asc · [email protected]http://archives.neohapsis.com/archives/bugtraq/2000-08/0530.html · [email protected]http://www.linux-mandrake.com/en/updates/MDKSA-2000-044.php3 · [email protected]http://www.novell.com/linux/security/advisories/adv6_draht_screen_txt.html · [email protected]http://www.redhat.com/support/errata/RHSA-2000-058.html · [email protected]http://www.securityfocus.com/archive/1/80178 · [email protected]http://www.securityfocus.com/bid/1641 · [email protected]https://exchange.xforce.ibmcloud.com/vulnerabilities/5188 · [email protected]ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:46.screen.asc · af854a3a-2127-422b-91ae-364da2661108http://archives.neohapsis.com/archives/bugtraq/2000-08/0530.html · af854a3a-2127-422b-91ae-364da2661108http://www.linux-mandrake.com/en/updates/MDKSA-2000-044.php3 · af854a3a-2127-422b-91ae-364da2661108http://www.novell.com/linux/security/advisories/adv6_draht_screen_txt.html · af854a3a-2127-422b-91ae-364da2661108http://www.redhat.com/support/errata/RHSA-2000-058.html · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/80178 · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/1641 · af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/5188 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 22 JAN 05:00Z
    Format string vulnerability in screen 3.9.5 and earlier allows local users to gain root privileges via format characters in the vbell_msg initialization…
    cvelistv5