CVE-2000-0844

Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.

• caldera openlinux ebuilder 3.0 • immunix immunix 6.2 • conectiva linux 4.0 • conectiva linux 4.0es • conectiva linux 4.1 • conectiva linux 4.2 • conectiva linux 5.0 • conectiva linux 5.1 • sgi irix 6.2 • sgi irix 6.3 • sgi irix 6.4 • sgi irix 6.5 • sgi irix 6.5.1 • sgi irix 6.5.2m • sgi irix 6.5.3 • sgi irix 6.5.3f • sgi irix 6.5.3m • sgi irix 6.5.4 • sgi irix 6.5.6 • sgi irix 6.5.7 • sgi irix 6.5.8 • caldera openlinux • caldera openlinux eserver 2.3 • debian debian linux 2.0 • debian debian linux 2.1 • debian debian linux 2.2 • debian debian linux 2.3 • ibm aix 3.2 • ibm aix 3.2.4 • ibm aix 3.2.5 • ibm aix 4.0 • ibm aix 4.1 • ibm aix 4.1.1 • ibm aix 4.1.2 • ibm aix 4.1.3 • ibm aix 4.1.4 • ibm aix 4.1.5 • ibm aix 4.2 • ibm aix 4.2.1 • ibm aix 4.3 • ibm aix 4.3.1 • ibm aix 4.3.2 • mandrakesoft mandrake linux 7.0 • mandrakesoft mandrake linux 7.1 • redhat linux 5.0 • redhat linux 5.1 • redhat linux 5.2 • redhat linux 6.0 • redhat linux 6.1 • redhat linux 6.2 • slackware slackware linux 7.0 • slackware slackware linux 7.1 • sun solaris 2.6 • sun sunos 5.0 • sun sunos 5.1 • sun sunos 5.2 • sun sunos 5.3 • sun sunos 5.4 • sun sunos 5.5 • sun sunos 5.5.1 … and 14 more