CyberSec.Space Logo
Back to CVE Browser

CVE-2000-1010

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0310%
EPSS Percentile38.45th
PublishedDec 11, 2000
Last ModifiedApr 16, 2026

Vulnerability Description

Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via a user name that contains format characters.

Affected Platforms (CPE)

💻
Openbsd

Openbsd

= 2.3
💻
Openbsd

Openbsd

= 2.4
💻
Openbsd

Openbsd

= 2.5
💻
Openbsd

Openbsd

= 2.6
💻
Openbsd

Openbsd

= 2.7
💻
Redhat

Linux

= 5.0
💻
Redhat

Linux

= 5.1
💻
Redhat

Linux

= 5.2
💻
Redhat

Linux

= 5.2
💻
Redhat

Linux

= 5.2

References & Advisories

🔗 http://www.securityfocus.com/archive/1/137890
🔗 http://www.securityfocus.com/bid/1764
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/5344
🔗 http://www.securityfocus.com/archive/1/137890
🔗 http://www.securityfocus.com/bid/1764
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/5344

Related Vulnerabilities

CVE-2026-53430

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Mes...

CVE-2026-48854

Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc allows unauthenticated attackers to exhaust...

CVE-2026-48853

Deserialization of Untrusted Data and Allocation of Resources Without Limits or Throttling vulnerabilities in elixir-grpc grpc all...

CVE-2026-487237.8

The browserstack-cypress-cli is BrowserStack's CLI which allows users to run Cypress tests on BrowserStack. Versions prior to 1.36...