National Institute of Standards and Technology
Package illustrating a test case

Test case 1735

Description

This sample contains the format string vulnerability CVE-2000-0867 from sysklogd 1.3.30. The flaw is found when the LogLine() function of klogd.c calls the Syslog() function in the same file.

Flaws

Have any comments on this test case? Please, send us an email.