CVE-2000-0844: Caldera Openlinux

High severity, CVSS 10.0. EPSS: 15.6% chance of exploitation in the next 30 days.

Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.

Affected products

• Caldera Openlinux: any version
• Caldera Openlinux Ebuilder: version 3.0 only
• Caldera Openlinux Eserver: version 2.3 only
• Conectiva Linux: version 4.0 only; version 4.0es only; version 4.1 only; version 4.2 only; version 5.0 only; version 5.1 only
• Debian Debian Linux: version 2.0 only; version 2.1 only; version 2.2 only; version 2.3 only
• IBM Aix: version 3.2 only; version 3.2.4 only; version 3.2.5 only; version 4.0 only; version 4.1 only; version 4.1.1 only; …
• Immunix Immunix: version 6.2 only
• Mandrakesoft Mandrake Linux: version 7.0 only; version 7.1 only
• Red Hat Linux: version 5.0 only; version 5.1 only; version 5.2 only; version 6.0 only; version 6.1 only; version 6.2 only
• Sgi Irix: version 6.2 only; version 6.3 only; version 6.4 only; version 6.5 only; version 6.5.1 only; version 6.5.2m only; …
• Slackware Slackware Linux: version 7.0 only; version 7.1 only
• Sun Solaris: version 2.6 only
• Sun Sunos: version 5.0 only; version 5.1 only; version 5.2 only; version 5.3 only; version 5.4 only; version 5.5 only; …
• Suse Suse Linux: version 6.1 only; version 6.2 only; version 6.3 only; version 6.4 only; version 7.0 only
• Trustix Secure Linux: version 1.0 only; version 1.1 only
• Turbolinux Turbolinux: version 6.0 only; version 6.0.1 only; version 6.0.2 only; version 6.0.3 only; version 6.0.4 only

Published 2000-11-14. Last modified 2026-06-16.