10

CVE-2000-0844: caldera openlinux_ebuilder

CVSS: 10.0v2.0HighModified
Published 22-01-2001Last modified 08-08-2024
Open JSON
Some data may be incomplete
  • 1 reference with an unsupported link type was hidden.

Vulnerability summary

CVE-2000-0844 is a high (CVSS 10.0) vulnerability in caldera openlinux_ebuilder. EPSS estimates a 15.63% chance of exploitation in the next 30 days, higher than 96.8% of scored vulnerabilities. 13 public exploits are recorded.

Overall risk
90/100
0100
Critical · default modelHow is this calculated?
CVSS score
10.0/10
010
High · v2.0 (NVD)
EPSS score
15.63%
0%100%
Medium · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits13reference, exploit-database

Advisory lineage

Upstream 0 · Downstream 0 · Duplicates 1
CVE-2003-0090

Timeline

  1. 22-01-2001
    PublishedVulnerability first disclosed.
  2. 08-08-2024
    Last modifiedVulnerability information updated.

Description

Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

15.63%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 15.63% on 18-09-2026

18-09-202618-10-2026
EPSS score
15.63%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

13 found
  • referenceUnverified

    Exploit Reference (archives.neohapsis.com)

    Maturity: unknown

  • referenceUnverified

    Exploit Reference (securityfocus.com)

    Maturity: unknown

  • exploit-databaselocalimmunixVerified

    Immunix OS 6.2 - LC glibc format string

    Maturity: weaponized

Show all 13 exploits
  • exploit-databaselocallinuxVerified

    GLIBC - '/bin/su' Local Privilege Escalation

    Maturity: weaponized

  • exploit-databaselocallinuxVerified

    GLIBC locale - bug mount

    Maturity: weaponized

  • exploit-databaselocallinuxVerified

    GLIBC locale - Format Strings

    Maturity: weaponized

  • exploit-databaselocallinuxVerified

    RedHat 6 GLIBC/locale - Subsystem Format String

    Maturity: weaponized

  • exploit-databaselocalsolarisVerified

    Solaris 2.6/7.0 'eject' locale - Subsystem Format String

    Maturity: weaponized

  • exploit-databaselocalsolarisVerified

    Solaris 2.6/7.0 - 'locale' Format Strings noexec stack Overflow

    Maturity: weaponized

  • exploit-databaselocalsolarisVerified

    Solaris 2.6/7.0 /locale - Subsystem Format String

    Maturity: weaponized

  • exploit-databaselocalsolarisVerified

    Solaris/SPARC 2.7 / 7 locale - Format String

    Maturity: weaponized

  • exploit-databaselocalunixVerified

    Libc locale - Local Privilege Escalation (1)

    Maturity: weaponized

  • exploit-databaselocalunixVerified

    Libc locale - Local Privilege Escalation (2)

    Maturity: weaponized

Weaknesses

CWE · root cause

Affected systems

Caldera2 products
Sun2 products
  • solaris2.6
  • sunos5.0 | 5.1 | 5.2 | 5.3 | 5.4 | 5.5 | 5.5.1 | 5.7 | 5.8
Conectiva1 product
  • linux4.0 | 4.0es | 4.1 | 4.2 | 5.0 | 5.1
Debian1 product
Ibm1 product
  • aix3.2 | 3.2.4 | 3.2.5 | 4.0 | 4.1 | 4.1.1 | 4.1.2 | 4.1.3 | 4.1.4 | 4.1.5 | 4.2 | 4.2.1 | 4.3 | 4.3.1 | 4.3.2
Immunix1 product
Mandrakesoft1 product
Redhat1 product
  • linux5.0 | 5.1 | 5.2 | 6.0 | 6.1 | 6.2
Sgi1 product
  • irix6.2 | 6.3 | 6.4 | 6.5 | 6.5.1 | 6.5.2m | 6.5.3 | 6.5.3f | 6.5.3m | 6.5.4 | 6.5.6 | 6.5.7 | 6.5.8
Slackware1 product
Suse1 product
Trustix1 product
Turbolinux1 product

13 vendors · 15 products

References

11 links
Show all 11 references