Read the docs
TI-2000-00835 Aliases CVE-2000-0845GHSA-2pvg-4x8f-qx36

kdebug daemon (kdebugd) in Digital Unix 4.0F allows remote attackers to read arbitrary…

Priority LOW 31Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

kdebug daemon (kdebugd) in Digital Unix 4.0F allows remote attackers to read arbitrary files by specifying the full file name in the initialization packet.

Why it matters now

EPSS 0.01322 71st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:o:digital:unix:4.0f:*:*:*:*:*:*:*4.0fVulnerableDigital
  • cpe:2.3:o:digital:unix:4.0f:*:*:*:*:*:*:* Versions 4.0f Vulnerable ·Digital

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2000-0845
  2. 2026-10-03 Alias added: GHSA-2pvg-4x8f-qx36

References

Patch 1

  • TI-1999-00506 ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service. CVSS 2.0MEDIUM 5.0
  • TI-2001-00134 Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management… CVSS 2.0HIGH 10.0
  • TI-1999-00072 Telnet allows a remote client to specify environment variables including LD_LIBRARY_PATH… CVSS 2.0HIGH 10.0
  • TI-1999-00638 The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands. CVSS 2.0HIGH 7.5
  • TI-2001-00362 Buffer overflow in lpsched on DGUX version R4.20MU06 and MU02 allows a local attacker to… CVSS 2.0HIGH 7.2
  • TI-1999-00642 Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users… CVSS 2.0HIGH 7.2
See all 16 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences