VULNERABILITY INTELLIGENCE

CVE-2000-1004

CVSS score4.6 MEDIUM

EPSS probability0.36%

CISA KEVNot currently listed

Published2000-12-11

Last modified2026-06-16

Description

Format string vulnerability in OpenBSD photurisd allows local users to execute arbitrary commands via a configuration file directory name that contains formatting characters.