← CVECheck
HomeVulnerabilities

CVE-2000-0844 — HIGH severity vulnerability (Some functions that implement the locale subsystem on Unix d)

Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.

CVE IDCVE-2000-0844
SeverityHIGH
CVSS score10.0
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
CWECWE-264
StatusModified
Published2000-11-14
Last modified2026-04-16
DescriptionSome functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.
SourceNIST National Vulnerability Database

🔍 Search all vulnerabilities →