CVE-2000-1013

CVE-2000-1013

High · published December 11, 2000

CVSS v2.0
7.2
EPSS
0%
Percentile
27.7
In the wild
Unconfirmed
What it is

The setlocale function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable.

The record
Technical detail
CVSS v2.0
7.2 · HIGH
Vector
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS v4.0
Not supplied
EPSS
0.00354 · 27.7th percentile
Published
2000-12-11T10:00Z
Affected products (12)
ProductVersionsFixed in
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
freebsd/freebsdall versions—
References (2)
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:53.catopen.asc · [email protected]ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:53.catopen.asc · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 29 NOV 05:00Z
    The setlocale function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable
    cvelistv5