CVE-2000-0963

CVE-2000-0963

High · published December 19, 2000

CVSS v2.0
7.2
EPSS
1%
Percentile
51.8
In the wild
Unconfirmed
What it is

Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFO_DIRS.

The record
Technical detail
CVSS v2.0
7.2 · HIGH
Vector
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS v4.0
Not supplied
EPSS
0.00685 · 51.8th percentile
Published
2000-12-19T10:00Z
Affected products (13)
ProductVersionsFixed in
immunix/immunixall versions—
immunix/immunixall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
redhat/linuxall versions—
redhat/linuxall versions—
redhat/linuxall versions—
redhat/linuxall versions—
invisible-island/ncurses< 5.65.6
References (8)
EPSS history
Timeline
  • 29 NOV 05:00Z
    Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFO_DIRS
    cvelistv5