Caldera Openlinux Ebuilder vulnerabilities

3 CVEs affecting Caldera Openlinux Ebuilder, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2000-0917, published 2000-12-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2000-0917, published 2000-12-19. High severity, CVSS 10.0. EPSS: 78.7% chance of exploitation in the next 30 days. Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.
CVE-2000-0844, published 2000-11-14. High severity, CVSS 10.0. EPSS: 15.6% chance of exploitation in the next 30 days. Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as…
CVE-2000-0594, published 2000-07-04. Medium severity, CVSS 5.0. EPSS: 9.9% chance of exploitation in the next 30 days. BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel whose name includes special formatting…