Unscored CVE-2000-0867 EUVD-2000-0854GHSA-6723-fv38-7gcj

Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privil…

Published Jan 22, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages.

References

klogd-format-string(5259) vdb-entry
5824 vdb-entry
20000918 Conectiva Linux Security Announcement - sysklogd mailing-list
TLSA2000022-2 vendor-advisory
MDKSA-2000:050 vendor-advisory
20000917 klogd format bug mailing-list
RHSA-2000:061 vendor-advisory
20000920 syslogd + klogd format string parsing error vendor-advisory