Vulnerability Details CVE-2000-0998
Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" function.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 49.0%
CVSS Severity
CVSS v2 Score 7.2
References
- ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:62.top.v1.1.asc
- ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch
- http://www.securityfocus.com/bid/1895
- ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:62.top.v1.1.asc
- ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch
- http://www.securityfocus.com/bid/1895
Products affected by CVE-2000-0998
-
cpe:2.3:o:freebsd:freebsd:3.5
-
cpe:2.3:o:freebsd:freebsd:3.5.1
-
cpe:2.3:o:freebsd:freebsd:4.0
-
cpe:2.3:o:freebsd:freebsd:4.1
-
cpe:2.3:o:freebsd:freebsd:4.1.1