Every CVE Search/ Get API key

CVE-2000-1043

Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux...

10.0 High

Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function.

Exploit likelihood

1.83%Up 0.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 10.0

Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function.

Record
CVE-2000-1043
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function.

Record
CVE-2000-1043
Updated
2026-11-02
EUVDEUVD-2000-1030 No score

Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function.

Record
EUVD-2000-1030
Updated
2026-11-03
GitHub AdvisoriesGHSA-2vq2-p76v-j88p No score

Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux...

Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function.

Record
GHSA-2vq2-p76v-j88p
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2000-1043 is a high vulnerability (CVSS 10.0) in Mandrakesoft Mandrake Linux, published December 11, 2000. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.83%, the 78th percentile. No source names a fixed version.

References

MoveEnter Open