CVE-2000-1013: Freebsd

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

The setlocale function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable.

Affected products

• Freebsd Freebsd: version 3.0 only; version 3.1 only; version 3.2 only; version 3.3 only; version 3.4 only; version 3.5 only; …

Published 2000-12-11. Last modified 2026-09-23.