Vulnerability Details CVE-2000-0963
Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFO_DIRS.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 48.6%
CVSS Severity
CVSS v2 Score 7.2
References
- http://www.calderasystems.com/support/security/advisories/CSSA-2000-036.0.txt
- http://www.securityfocus.com/archive/1/138550
- http://www.securityfocus.com/bid/1142
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44487
- http://www.calderasystems.com/support/security/advisories/CSSA-2000-036.0.txt
- http://www.securityfocus.com/archive/1/138550
- http://www.securityfocus.com/bid/1142
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44487
Products affected by CVE-2000-0963
-
cpe:2.3:a:immunix:immunix:6.2
-
cpe:2.3:a:immunix:immunix:7.0_beta
-
cpe:2.3:a:invisible-island:ncurses:-
-
cpe:2.3:a:invisible-island:ncurses:4.0
-
cpe:2.3:a:invisible-island:ncurses:4.1
-
cpe:2.3:a:invisible-island:ncurses:4.2
-
cpe:2.3:a:invisible-island:ncurses:5.0
-
cpe:2.3:a:invisible-island:ncurses:5.1
-
cpe:2.3:a:invisible-island:ncurses:5.2.
-
cpe:2.3:a:invisible-island:ncurses:5.3
-
cpe:2.3:a:invisible-island:ncurses:5.4
-
cpe:2.3:a:invisible-island:ncurses:5.5
-
cpe:2.3:o:freebsd:freebsd:3.4
-
cpe:2.3:o:freebsd:freebsd:3.5.1
-
cpe:2.3:o:freebsd:freebsd:4.0
-
cpe:2.3:o:freebsd:freebsd:4.1
-
cpe:2.3:o:freebsd:freebsd:4.1.1
-
cpe:2.3:o:redhat:linux:6.2
-
cpe:2.3:o:redhat:linux:7.0