CVE-2000-0763: David Bagley Xlock

High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days.

xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privileges via the -d option.

Affected products

• David Bagley Xlock: version 4.16 only; version 4.16.1 only

Published 2000-10-20. Last modified 2026-06-16.