CVE-2000-0993

CVE-2000-0993

High · published December 19, 2000

CVSS v2.0
7.2
EPSS
2%
Percentile
76.5
In the wild
Unconfirmed
What it is

Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as chpass or passwd.

The record
Technical detail
CVSS v2.0
7.2 · HIGH
Vector
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS v4.0
Not supplied
EPSS
0.01671 · 76.5th percentile
Published
2000-12-19T10:00Z
Affected products (13)
ProductVersionsFixed in
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
netbsd/netbsdall versions—
netbsd/netbsdall versions—
netbsd/netbsdall versions—
openbsd/openbsdall versions—
openbsd/openbsdall versions—
openbsd/openbsdall versions—
openbsd/openbsdall versions—
openbsd/openbsdall versions—
References (12)
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:58.chpass.asc · [email protected]ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-015.txt.asc · [email protected]http://marc.info/?l=bugtraq&m=97068555106135&w=2 · [email protected]http://www.openbsd.org/errata27.html#pw_error · [email protected]http://www.securityfocus.com/bid/1744 · [email protected]https://exchange.xforce.ibmcloud.com/vulnerabilities/5339 · [email protected]ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:58.chpass.asc · af854a3a-2127-422b-91ae-364da2661108ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-015.txt.asc · af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=97068555106135&w=2 · af854a3a-2127-422b-91ae-364da2661108http://www.openbsd.org/errata27.html#pw_error · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/1744 · af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/5339 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 22 JAN 05:00Z
    Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as…
    cvelistv5