CVE-2000-1004

OpenBSD photurisd - Local Format String Vulnerability via Configuration File Directory Name

Title source: llm
STIX 2.1

Description

Format string vulnerability in OpenBSD photurisd allows local users to execute arbitrary commands via a configuration file directory name that contains formatting characters.

References (3)

Core 3
Core References
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=97068555106135&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/6123
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/5336

Scores

EPSS 0.0009
EPSS Percentile 25.0%

Details

Status published
Products (5)
openbsd/openbsd 2.3
openbsd/openbsd 2.4
openbsd/openbsd 2.5
openbsd/openbsd 2.6
openbsd/openbsd 2.7
Published Dec 11, 2000
Tracked Since Feb 18, 2026