Vulnerability in Freebsd

CVE-2000-0993

Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as chpass or passwd.

EPSS: 0.017 (74.4th percentile) — read the EPSS interpretation.

Affected products

Freebsd — versions 3.2, 3.3, 3.4
Netbsd — versions 1.4, 1.4.1, 1.4.2
Openbsd — versions 2.3, 2.4, 2.5
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (vendor-advisory, x_refsource_OPENBSD)
cve@mitre.org (vdb-entry, x_refsource_XF)