ISOMAN

CVE

CVE-2000-0996

Format string vulnerability in OpenBSD su program (and possibly other BSD-based operating systems) allows local attackers to gain root privileges via a malformed shell.

Severity
HIGH
CVSS
7.2
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
OpenBSD7.9 alpha boot-cdunknownsource
OpenBSD7.9 alpha installunknownsource
OpenBSD7.9 alpha minirootunknownsource
OpenBSD7.9 amd64 boot-cdunknownsource
OpenBSD7.9 amd64 floppyunknownsource
OpenBSD7.9 amd64 installunknownsource
OpenBSD7.9 amd64 minirootunknownsource
OpenBSD7.9 arm64 boot-cdunknownsource
OpenBSD7.9 arm64 installunknownsource
OpenBSD7.9 arm64 minirootunknownsource
OpenBSD7.9 armv7 minirootunknownsource
OpenBSD7.9 hppa boot-cdunknownsource
OpenBSD7.9 hppa installunknownsource
OpenBSD7.9 hppa lifunknownsource
OpenBSD7.9 i386 boot-cdunknownsource
OpenBSD7.9 i386 floppyunknownsource
OpenBSD7.9 i386 installunknownsource
OpenBSD7.9 i386 minirootunknownsource
OpenBSD7.9 landisk minirootunknownsource
OpenBSD7.9 loongson boot-cdunknownsource
OpenBSD7.9 loongson minirootunknownsource
OpenBSD7.9 luna88k minirootunknownsource
OpenBSD7.9 macppc boot-cdunknownsource
OpenBSD7.9 macppc installunknownsource
OpenBSD7.9 octeon installunknownsource
OpenBSD7.9 octeon minirootunknownsource
OpenBSD7.9 powerpc64 installunknownsource
OpenBSD7.9 powerpc64 minirootunknownsource
OpenBSD7.9 riscv64 installunknownsource
OpenBSD7.9 riscv64 minirootunknownsource
OpenBSD7.9 sparc64 boot-cdunknownsource
OpenBSD7.9 sparc64 floppyunknownsource
OpenBSD7.9 sparc64 floppy-bunknownsource
OpenBSD7.9 sparc64 installunknownsource
OpenBSD7.9 sparc64 minirootunknownsource

References

  1. ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch
  2. http://www.osvdb.org/6124
  3. https://exchange.xforce.ibmcloud.com/vulnerabilities/5636
  4. ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch
  5. http://www.osvdb.org/6124
  6. https://exchange.xforce.ibmcloud.com/vulnerabilities/5636