Unscored severity · published Oct 20, 2000
CVE-2000-0701
The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows local users to gain privileges
–
CVSS
0.4%
EPSS
No
On KEV
Description
The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows local users to gain privileges.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Linux · Conectiva
4.1; 4.2; 5.0; 5.1 · source: NVD
MA
Mailman · Gnu
2.0; 2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2000-0701
CVE.org
https://www.cve.org/CVERecord?id=CVE-2000-0701
Patch
http://archives.neohapsis.com/archives/bugtraq/2000-07/0474.html
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-07/0479.html
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2000-030.html
Patch
http://www.securityfocus.com/archive/1/73220
Patch
http://www.securityfocus.com/bid/1539
www.securityfocus.com
http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000802105050.A11733%40rak.isternet.sk
More from Linux
9.8
CVE-2002-0083
Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges
–
CVE-2005-3626
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted…
–
CVE-2005-3625
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams…
–
CVE-2005-3624
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via…
–
CVE-2005-0207
Unknown vulnerability in Linux kernel 2.4.x, 2.5.x, and 2.6.x allows NFS clients to cause a denial of service via O_DIRECT