CVE-2000-0994

CVE-2000-0994 describes a format string vulnerability in the OpenBSD fstat program, potentially affecting other BSD-based operating systems. This flaw allows a local attacker to gain root privileges by manipulating the PWD environmental variable. With a CVSS score of 7.2 (HIGH), it represents a critical local privilege escalation, requiring low attack complexity and leading to complete compromise of confidentiality, integrity, and availability. While not listed on the CISA KEV catalog and showing no active exploitation or social media discussion, exploit code is publicly available via ExploitDB, indicating its exploitability.