CVE:CVE-2000-0993
CNNVD:CNNVD-200012-189
BSD libutil程序库中的pw_error函数存在格式字符串漏洞。本地用户可以借助命令中的畸形密码例如chpass或passwd来获取根权限。
solution:Upgrade freebsd freebsd to a higher version than 3.2,3.3,3.4,3.5,4.0,and avoid the version 3.2,3.3,3.4,3.5,4.0; Upgrade netbsd netbsd to a higher version than 1.4,1.4.1,1.4.2,and avoid the version 1.4,1.4.1,1.4.2; Upgrade openbsd openbsd to a higher version than 2.3,2.4,2.5,2.6,2.7,and avoid the version 2.3,2.4,2.5,2.6,2.7