VULNERABILITY INTELLIGENCE

CVE-2000-0844

CVSS score10 HIGH
EPSS probability15.63%
CISA KEVNot currently listed
Published2000-11-14
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.

Primary references