CVE-2000-1043 Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog()...
HighCVSS 10.0
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mandrakesoft mandrake linux | = 6.1 | No fix listed |
| mandrakesoft mandrake linux | = 7.0 | No fix listed |
| mandrakesoft mandrake linux | = 7.1 | No fix listed |
References
- MDKSA-2000:064 patch vendor-advisory
- linux-ypserv-format-string(5731) vdb-entry