10.0crit
CVE-2000-1042
Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root pr…
Published 25 y ago · modified 44 d ago · JSON
CVSS
10.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.0%
percentile 81%
Public exploits
0
none known
Summary
Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function.
Exploit prediction (EPSS)
1.97% probability of exploitation in the next 30 days, higher than 81% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
References
- exchange.xforce.ibmcloud.com /vulnerabilities/5730 · vdb-entry, x_refsource_XF, x_transferred
- linux-mandrake.com /en/security/MDKSA-2000-064.php3?dis=7.1 · vendor-advisory, x_refsource_MANDRAKE, x_transferred
Sources
- CVE List: CVE-2000-1042
- NVD: CVE-2000-1042
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.