CVEvulnerability
CVE-2000-0963
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2000-12-19
- Last modified
- 2026-09-23
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFO_DIRS.
Affected configurations
• immunix immunix 6.2
• immunix immunix 7.0 beta
• freebsd freebsd 3.4
• freebsd freebsd 3.5.1
• freebsd freebsd 4.0
• freebsd freebsd 4.1
• freebsd freebsd 4.1.1
• redhat linux 6.2
• redhat linux 7.0
• invisible-island ncurses (< 5.6)
References
- http://www.calderasystems.com/support/security/advisories/CSSA-2000-036.0.txt Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/138550 Broken Link, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/1142 Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44487 VDB Entry, Vendor Advisory
- http://www.calderasystems.com/support/security/advisories/CSSA-2000-036.0.txt Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/138550 Broken Link, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/1142 Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44487 VDB Entry, Vendor Advisory