CVE-2000-0803

CVE-2000-0803 describes a critical vulnerability in GNU Groff where it insecurely searches for device description files in the current working directory. This allows a local attacker to achieve privilege escalation by crafting a malicious postpro directive within such a file, which is then executed when another user runs groff. With a CVSS score of 10.0, this vulnerability presents a high risk due to its network-based attack vector, low complexity, and complete compromise of confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this CVE.