Lucene search

[email protected]CVE-2000-0998

HistoryDec 11, 2000 - 5:00 a.m.

CVE-2000-0998

2000-12-1105:00:00

[email protected]

web.nvd.nist.gov

cve-2000-0998

format string vulnerability

root privileges

local attackers

kill function

renice function

top program.

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

0.4%

JSON

Format string vulnerability in top program allows local attackers to gain root privileges via the “kill” or “renice” function.

Affected configurations

NVD

Node

freebsdfreebsdMatch3.5

freebsdfreebsdMatch3.5stable

freebsdfreebsdMatch3.5.1

freebsdfreebsdMatch3.5.1release

freebsdfreebsdMatch3.5.1stable

freebsdfreebsdMatch4.0

freebsdfreebsdMatch4.0alpha

freebsdfreebsdMatch4.1

freebsdfreebsdMatch4.1.1

CPENameOperatorVersion
freebsd:freebsdfreebsdeq3.5
freebsd:freebsdfreebsdeq3.5.1
freebsd:freebsdfreebsdeq4.0
freebsd:freebsdfreebsdeq4.1
freebsd:freebsdfreebsdeq4.1.1

CPE	Name	Operator	Version
freebsd:freebsd	freebsd	eq	3.5
freebsd:freebsd	freebsd	eq	3.5.1
freebsd:freebsd	freebsd	eq	4.0
freebsd:freebsd	freebsd	eq	4.1
freebsd:freebsd	freebsd	eq	4.1.1

References

ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:62.top.v1.1.asc

ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch

www.securityfocus.com/bid/1895

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

0.4%

JSON

Related for CVE-2000-0998

cvelist1 nvd1