Vulnerability in Mandrakesoft Mandrake Linux
CVE-2000-0867
Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages.
EPSS: 0.004 (33.3th percentile) — read the EPSS interpretation.
Affected products
- Mandrakesoft Mandrake_linux — versions 6.0, 6.1, 7.0
- Slackware Slackware_linux
- Trustix Secure_linux — versions 1.1
- Debian Debian_linux — versions 2.1, 2.2
- Redhat Linux — versions 5.2, 6.2
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vendor-advisory, x_refsource_TURBO)
- cve@mitre.org (vendor-advisory, x_refsource_MANDRAKE)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_SUSE)