CVE-2000-0763
xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local...
xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privileges via the -d option.
Exploit likelihood
What each source reports
NVD Score used
xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privileges via the -d option.
- Record
CVE-2000-0763- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privileges via the -d option.
- Record
CVE-2000-0763- Updated
- 2026-11-02
EUVDEUVD-2000-0757 No score
xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privileges via the -d option.
- Record
EUVD-2000-0757- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8w62-g849-p4ww No score
xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local...
xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privileges via the -d option.
- Record
GHSA-8w62-g849-p4ww- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | David Bagley xlock 4.16 - User Supplied Format String (1) | 2000-08-15 |
| Exploit-DB | David Bagley xlock 4.16 - User Supplied Format String (2) | 2000-10-21 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2000-0763 is a high vulnerability (CVSS 7.2) in David Bagley Xlock, published October 13, 2000. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.24%, the 69th percentile. No source names a fixed version.
References
debian.org/security/2000/20000816
archives.neohapsis.com/archives/freebsd/2000-08/0340.html
securityfocus.com/templates/archive.pike?list=1&msg=20000815231724.A14694%40subterrain.net
nvd.nist.gov/vuln/detail/CVE-2000-0763
github.com/advisories/GHSA-8w62-g849-p4ww