Vendors / David Bagley Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now David Bagley records in CISA KEV No David Bagley vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 34
xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privileges via the -d option.
CVSS 2.0 HIGH 7.2· Local · No auth · Interaction — · EPSS 0.0124 · Published 2000-10-13 · No fix listed
Priority LOW 11
The (1) checkPasswd and (2) checkGroupXlockPasswds functions in xlockmore before 5.43 do not properly handle when a NULL value is returned upon an error by the crypt or dispcrypt function as implemented in glibc 2.17 and…
CVSS 2.0 LOW 2.1· Local · No auth · Interaction — · EPSS 0.00397 · Published 2014-05-30 · No fix listed
Priority LOW 11
Buffer overflow in xlockmore xlock program version 4.16 and earlier allows local users to read sensitive data from memory via a long -mode option.
CVSS 2.0 LOW 2.1· Local · No auth · Interaction — · EPSS 0.00398 · Published 2000-07-12 · No fix listed
Open these records in search → All records by CVSS severity
Critical0 High1 Medium0 Low2 No CVSS0