Vulnerability Report

CVE-2000-0607

Title: fld CHARSET settings in input file overflow allows local root

Local privilege escalation

Proof Of Concept

PoC Available for CVE-2000-0607

CWE Category NVD-CWE-noinfo
Published Date Jun 21, 2000
Modified Date Apr 03, 2025
Exploit Status Available
Score 7.2 CVSS v2.0
Exploit Probability (EPSS)
0.29%

Vulnerability Summary

CVE-2000-0607: Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via an input file containing long CHARSET_REGISTRY or CHARSET_ENCODING settings.

Impacted Vendors

D
debian 1
R
redhat 1
C
cyrix 1
M
mandrakesoft 1
C
conectiva 1

Reference Links

http://www.securityfocus.com/bid/1371 http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0006192340340.19998-100000%40ferret.lmh.ox.ac.uk http://www.securityfocus.com/bid/1371 http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0006192340340.19998-100000%40ferret.lmh.ox.ac.uk
CVSS v2.0
Source Entity [email protected]
Severity HIGH
7.2
Access Vector
N/A
Authentication
N/A
RAW VECTOR AV:L/AC:L/Au:N/C:C/I:C/A:C

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2000-0607 Exploits & PoCs (Proof Of Concept)

Exploit-DB https://www.exploit-db.com/exploits/20024
View Code
MODIFIED

Vulnerability data or affected products updated.

PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A
Complexity N/A
Privileges N/A
Interaction NONE
CVSS Vector String AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected Stack

No specific products linked.