Details of VAR-200012-0186

ID

VAR-200012-0186

CVE

CVE-2000-0950

TITLE

TIS Firewall toolkit x-gw Format string vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-200012-122

DESCRIPTION

Format string vulnerability in x-gw in TIS Firewall Toolkit (FWTK) allows local users to execute arbitrary commands via a malformed display name. Internet Firewall Toolkit is prone to a local security vulnerability

Trust: 1.26

sources: NVD: CVE-2000-0950 // BID: 88582 // VULHUB: VHN-2520

AFFECTED PRODUCTS

vendor:

tis

model:

internet firewall toolkit

scope:

version:

2.1

Trust: 1.9

sources: BID: 88582 // CNNVD: CNNVD-200012-122 // NVD: CVE-2000-0950

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2000-0950
value:	HIGH
Trust: 1.0
CNNVD:	CNNVD-200012-122
value:	HIGH
Trust: 0.6
VULHUB:	VHN-2520
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2000-0950
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
VULHUB:	VHN-2520
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-2520 // CNNVD: CNNVD-200012-122 // NVD: CVE-2000-0950

PROBLEMTYPE DATA

problemtype:

NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2000-0950

THREAT TYPE

local

Trust: 0.9

sources: BID: 88582 // CNNVD: CNNVD-200012-122

TYPE

format string

Trust: 0.6

sources: CNNVD: CNNVD-200012-122

EXTERNAL IDS

db:	NVD	id:	CVE-2000-0950	Trust: 2.0
db:	XF	id:	5420	Trust: 0.9
db:	CNNVD	id:	CNNVD-200012-122	Trust: 0.7
db:	BUGTRAQ	id:	20001026 FWTK X-GW SECURITY ADVISORY [GSA2000-01]	Trust: 0.6
db:	BID	id:	88582	Trust: 0.4
db:	VULHUB	id:	VHN-2520	Trust: 0.1

sources: VULHUB: VHN-2520 // BID: 88582 // CNNVD: CNNVD-200012-122 // NVD: CVE-2000-0950

REFERENCES

url:	http://archives.neohapsis.com/archives/bugtraq/2000-10/0376.html	Trust: 2.0
url:	https://exchange.xforce.ibmcloud.com/vulnerabilities/5420	Trust: 1.1
url:	http://xforce.iss.net/static/5420.php	Trust: 0.9

sources: VULHUB: VHN-2520 // BID: 88582 // CNNVD: CNNVD-200012-122 // NVD: CVE-2000-0950

CREDITS

Unknown

Trust: 0.3

sources: BID: 88582

SOURCES

db:	VULHUB	id:	VHN-2520
db:	BID	id:	88582
db:	CNNVD	id:	CNNVD-200012-122
db:	NVD	id:	CVE-2000-0950

LAST UPDATE DATE

2024-08-14T14:53:59.682000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-2520	date:	2017-12-19T00:00:00
db:	BID	id:	88582	date:	2000-12-19T00:00:00
db:	CNNVD	id:	CNNVD-200012-122	date:	2005-10-20T00:00:00
db:	NVD	id:	CVE-2000-0950	date:	2017-12-19T02:29:12.707

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-2520	date:	2000-12-19T00:00:00
db:	BID	id:	88582	date:	2000-12-19T00:00:00
db:	CNNVD	id:	CNNVD-200012-122	date:	2000-12-19T00:00:00
db:	NVD	id:	CVE-2000-0950	date:	2000-12-19T05:00:00