CVE-2000-0963
Not yet rated
Description
Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFO_DIRS.
Metrics
- EPSS — exploit probability
- 1% (percentile: 53) as of 1 November 2026
Affected products
immunix: immunix; freebsd: freebsd; redhat: linux; invisible-island: ncurses
References
- http://www.calderasystems.com/support/security/advisories/CSSA-2000-036.0.txt PatchVendor Advisory
- http://www.securityfocus.com/bid/1142 Broken LinkExploitPatchThird Party AdvisoryVDB EntryVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44487 VDB EntryVendor Advisory
- http://www.calderasystems.com/support/security/advisories/CSSA-2000-036.0.txt PatchVendor Advisory
- http://www.securityfocus.com/bid/1142 Broken LinkExploitPatchThird Party AdvisoryVDB EntryVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44487 VDB EntryVendor Advisory
- http://www.securityfocus.com/archive/1/138550 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/archive/1/138550 Broken LinkThird Party AdvisoryVDB Entry