Lucene search
HistoryDec 11, 2000 - 5:00 a.m.
CVE-2000-1010
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.6
Confidence
High
EPSS
0.005
Percentile
77.4%
Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via a user name that contains format characters.
Affected configurations
Node
openbsdopenbsdMatch2.3
ORopenbsdopenbsdMatch2.4
ORopenbsdopenbsdMatch2.5
ORopenbsdopenbsdMatch2.6
ORopenbsdopenbsdMatch2.7
ORredhatlinuxMatch5.0
ORredhatlinuxMatch5.1
ORredhatlinuxMatch5.2alpha
ORredhatlinuxMatch5.2i386
ORredhatlinuxMatch5.2sparc
| Vendor | Product | Version | CPE |
|---|---|---|---|
| openbsd | openbsd | 2.3 | cpe:2.3:o:openbsd:openbsd:2.3:*:*:*:*:*:*:* |
| openbsd | openbsd | 2.4 | cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:* |
| openbsd | openbsd | 2.5 | cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:* |
| openbsd | openbsd | 2.6 | cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:* |
| openbsd | openbsd | 2.7 | cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:* |
| redhat | linux | 5.0 | cpe:2.3:o:redhat:linux:5.0:*:*:*:*:*:*:* |
| redhat | linux | 5.1 | cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:* |
| redhat | linux | 5.2 | cpe:2.3:o:redhat:linux:5.2:*:alpha:*:*:*:*:* |
| redhat | linux | 5.2 | cpe:2.3:o:redhat:linux:5.2:*:i386:*:*:*:*:* |
| redhat | linux | 5.2 | cpe:2.3:o:redhat:linux:5.2:*:sparc:*:*:*:*:* |
Related
securityvulns
securityvulns
IRIX talkd vulnerability
2002-06-12 00:00:00
cvelist
cvelist
CVE-2000-1010
2001-01-22 05:00:00
cve
cve
CVE-2000-1010
2001-01-22 05:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.6
Confidence
High
EPSS
0.005
Percentile
77.4%
Related for NVD:CVE-2000-1010