CVEvulnerability

CVE-2000-0867

7.2 HIGH Published 2000-11-14 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2000-11-14
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages.

Affected configurations

• debian debian linux 2.1 • debian debian linux 2.2 • mandrakesoft mandrake linux 6.0 • mandrakesoft mandrake linux 6.1 • mandrakesoft mandrake linux 7.0 • mandrakesoft mandrake linux 7.1 • redhat linux 5.2 • redhat linux 6.2 • slackware slackware linux • trustix secure linux 1.1

References