Vulnerability record · CVE-2000-1014 · published 11 December 2000

CVE-2000-1014: Sco unixware vulnerability

SSco · Unixware

Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitrary commands via format characters in the queryText parameter.

7.5 CVSS 2.0 High EPSS 12% · top 4.1%

7.5CVSS 2.0 base score

12%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

8References, 2 tagged exploit

23 Sep 2026Last modified by NVD

Description

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

SUnixware Sco

References

Link	Tags
http://archives.neohapsis.com/archives/bugtraq/2000-09/0325.html
http://www.osvdb.org/3240
http://www.securityfocus.com/bid/1717	ExploitPatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5291
http://archives.neohapsis.com/archives/bugtraq/2000-09/0325.html
http://www.osvdb.org/3240
http://www.securityfocus.com/bid/1717	ExploitPatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5291

Track CVE-2000-1014 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2000-0308Netscape enterprise server vulnerabilityInsecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an att…EPSS 2.2%12 Mar 2001 10.0CVE-2000-0348Sco unixware vulnerabilityA vulnerability in the Sendmail configuration file sendmail.cf as installed in SCO UnixWare 7.1.0 and earlier allows an attacker to gain root privile…EPSS 1.5%12 Mar 2001 10.0CVE-2000-0003Sco unixware vulnerabilityBuffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable.EPSS 1.4%30 Dec 1999 10.0CVE-2000-0026Windowmaker wmmon vulnerabilityBuffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string.EPSS 4.6%21 Dec 1999 10.0CVE-1999-0835Ibm aix vulnerabilityDenial of service in BIND named via malformed SIG records.EPSS 1.5%10 Nov 1999 10.0CVE-1999-0368Proftpd project proftpd vulnerabilityBuffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.EPSS 40%9 Feb 1999 10.0CVE-1999-0798Bsdi bsd os vulnerabilityBuffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type.EPSS 1.6%4 Dec 1998 10.0CVE-1999-0836Sco unixware vulnerabilityUnixWare uidadmin allows local users to modify arbitrary files via a symlink attack.EPSS 3.1%2 Dec 1998

Source: NIST National Vulnerability Database (record CVE-2000-1014), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.