Unscored severity · published Nov 27, 2001
CVE-2001-0927
Format string vulnerability in the permitted function of GNOME libgtop_daemon in libgtop 1.0.12 and earlier allows remote attackers to execute arbitrary code via an argument that…
–
CVSS
2.8%
EPSS
No
On KEV
Description
Format string vulnerability in the permitted function of GNOME libgtop_daemon in libgtop 1.0.12 and earlier allows remote attackers to execute arbitrary code via an argument that contains format specifiers that are passed into the (1) syslog_message and (2) syslog_io_message functions.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LD
Libgtop Daemon · Gnome
1.0.6; 1.0.7; 1.0.9; 1.0.12 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-0927
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-0927
marc.info
http://marc.info/?l=bugtraq&m=100689302316077&w=2
Patch
http://www.debian.org/security/2002/dsa-098
More from Libgtop Daemon
–
CVE-2001-0928
Buffer overflow in the permitted function of GNOME gtop daemon (libgtop_daemon) in libgtop 1.0.13 and earlier may allow remote attackers to execute arbitrary code via long…