CVE-2000-0844
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected...
CVE-2000-0844 is a high vulnerability (CVSS 10.0) in Caldera Openlinux, published November 14, 2000. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 15.6%, the 96th percentile. No source names a fixed version.
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.
Exploit likelihood
What each source reports
NVD Score used
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.
- Record
CVE-2000-0844- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.
- Record
CVE-2000-0844- Updated
- 2026-11-02
EUVDEUVD-2000-0831 No score
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.
- Record
EUVD-2000-0831- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r7p8-7w63-3m9v No score
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected...
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.
- Record
GHSA-r7p8-7w63-3m9v- Updated
- 2026-11-02
Affected products
- caldera openlinux
- caldera openlinux ebuilder
- caldera openlinux eserver
- conectiva linux
- debian linux
- ibm aix
- immunix
- mandrakesoft mandrake linux
- redhat linux
- sgi irix
- slackware linux
- sun solaris
Show 4 moreShow less
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Solaris/SPARC 2.7 / 7 locale - Format String | 2000-11-20 |
| Exploit-DB | RedHat 6 GLIBC/locale - Subsystem Format String | 2000-09-06 |
| Exploit-DB | Solaris 2.6/7.0 /locale - Subsystem Format String | 2000-11-02 |
| Exploit-DB | Immunix OS 6.2 - LC glibc format string | 2000-09-04 |
| Exploit-DB | Solaris 2.6/7.0 'eject' locale - Subsystem Format String | 2000-09-08 |
| Exploit-DB | Libc locale - Local Privilege Escalation (1) | 2000-09-04 |
| Exploit-DB | Libc locale - Local Privilege Escalation (2) | 2000-09-04 |
| Exploit-DB | GLIBC - '/bin/su' Local Privilege Escalation | 2000-11-30 |
| Exploit-DB | Solaris 2.6/7.0 - 'locale' Format Strings noexec stack Overflow | 2000-11-30 |
| Exploit-DB | GLIBC locale - bug mount | 2000-12-02 |
| Exploit-DB | GLIBC locale - Format Strings | 2003-01-15 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD |
References
redhat.com/support/errata/RHSA-2000-057.html
novell.com/linux/security/advisories/adv5_draht_glibc_txt.html
archives.neohapsis.com/archives/bugtraq/2000-08/0436.html
turbolinux.com/pipermail/tl-security-announce/2000-September/000020.html
debian.org/security/2000/20000902
Show 7 moreShow less
securityfocus.com/bid/1634
calderasystems.com/support/security/advisories/CSSA-2000-030.0.txt
exchange.xforce.ibmcloud.com/vulnerabilities/5176
nvd.nist.gov/vuln/detail/CVE-2000-0844
github.com/advisories/GHSA-r7p8-7w63-3m9v