CVE-2000-1010

CVE-2000-1010 describes a critical format string vulnerability in the talkd daemon, affecting OpenBSD and potentially other BSD-based operating systems, including Red Hat Linux. This flaw allows remote unauthenticated attackers to execute arbitrary commands by supplying a malicious username containing format characters. With a CVSS score of 10.0 (HIGH), the vulnerability presents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its age and high severity, there is no evidence of active exploitation, publicly available exploit code in common frameworks like Metasploit or ExploitDB, nor significant community discussion or media coverage.