Vulnerability in Openbsd

CVE-2000-1004

Format string vulnerability in OpenBSD photurisd allows local users to execute arbitrary commands via a configuration file directory name that contains formatting characters.

EPSS: 0.004 (28.3th percentile) — read the EPSS interpretation.

Affected products

  • Openbsd — versions 2.3, 2.4, 2.5
  • N/a — versions n/a

References