CVE-2000-0993

BSD libutil - Privilege Escalation

Title source: llm
STIX 2.1

Description

Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as chpass or passwd.

Exploits (1)

exploitdb WORKING POC VERIFIED
by caddis · clocalbsd
https://www.exploit-db.com/exploits/243

References (6)

Scores

EPSS 0.0023
EPSS Percentile 45.7%

Details

Status published
Products (13)
freebsd/freebsd 3.2
freebsd/freebsd 3.3
freebsd/freebsd 3.4
freebsd/freebsd 3.5
freebsd/freebsd 4.0
netbsd/netbsd 1.4
netbsd/netbsd 1.4.1
netbsd/netbsd 1.4.2
openbsd/openbsd 2.3
openbsd/openbsd 2.4
... and 3 more
Published Dec 19, 2000
Tracked Since Feb 18, 2026