CVE-2000-0867: Debian Linux

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages.

Affected products

• Debian Debian Linux: version 2.1 only; version 2.2 only
• Mandrakesoft Mandrake Linux: version 6.0 only; version 6.1 only; version 7.0 only; version 7.1 only
• Red Hat Linux: version 5.2 only; version 6.2 only
• Slackware Slackware Linux: any version
• Trustix Secure Linux: version 1.1 only

Published 2000-11-14. Last modified 2026-06-16.