CVE-2000-0993: BSD chpass - 'pw_error(3)' Local Privilege…

Record summary

CVE-2000-0993 has a selected CVSS score of 7.2; EIP currently links 1 catalogued exploit.

Description

Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as chpass or passwd.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits: 1

Proofs of concept

Catalogued exploits

ExploitDBBSD chpass - 'pw_error(3)' Local Privilege EscalationExploitDB exploitby caddisNot analyzed1 file

ExploitDB

PoC details

References

20001004 Re: OpenBSD Security Advisorymailing list

http://marc.info/?l=bugtraq&m=97068555106135&w=2

20001003 A format string vulnerability exists in the pw_error(3) function.Vendor advisory

http://www.openbsd.org/errata27.html

1744vdb entry

http://www.securityfocus.com/bid/1744

bsd-libutil-format(5339)vdb entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/5339

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2000-0993