VYPR
Unrated severityNVD Advisory· Published Nov 14, 2000· Updated Apr 16, 2026

CVE-2000-0867

CVE-2000-0867

Description

Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages.

Affected products

10
  • cpe:2.3:o:debian:debian_linux:2.1:*:slink:*:*:*:*:*+ 1 more
    • cpe:2.3:o:debian:debian_linux:2.1:*:slink:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:2.2:*:potato:*:*:*:*:*
  • cpe:2.3:o:mandrakesoft:mandrake_linux:6.0:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:mandrakesoft:mandrake_linux:6.0:*:*:*:*:*:*:*
    • cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*
    • cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*
    • cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*
  • Red Hat/Linux2 versions
    cpe:2.3:o:redhat:linux:5.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:redhat:linux:5.2:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*
  • cpe:2.3:o:slackware:slackware_linux:*:*:*:*:*:*:*:*
  • cpe:2.3:o:trustix:secure_linux:1.1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

9

News mentions

0

No linked articles in our index yet.