CVE-2000-0844
NoneCVSS
—
EPSS
15.6%
Published
Nov 14, 2000
CISA due date
—
The record
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-41974 Permission control vulnerability in service notifications. Impact: Successful… CWE-264
- CVE-2026-9368 A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16. CWE-264
- CVE-2026-41962 Permission control vulnerability in the app management and control module. Impact… CWE-264
- CVE-2026-6878 A vulnerability was identified in ByteDance verl up to 0.7.0. CWE-264
- CVE-2026-6224 A security flaw has been discovered in nocobase plugin-workflow-javascript up to 2.0.23. CWE-264
- CVE-2026-6117 A vulnerability was found in AstrBotDevs AstrBot up to 4.22.1. CWE-264
- CVE-2026-20046 A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR… CWE-264
- CVE-2019-10709 AsusPTPFilter.sys on Asus Precision TouchPad 11.0.0.25 hardware has a Pool Overflow… CWE-264