CVEvulnerability
CVE-2001-0912
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2001-11-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Packaging error for expect 8.3.3 in Mandrake Linux 8.1 causes expect to search for its libraries in the /home/snailtalk directory before other directories, which could allow a local user to gain root privileges.
Affected configurations
• mandrakesoft mandrake linux 8.1
Related
Referenced by CWE · observed example (1)
- CWE-427 Uncontrolled Search Path Element weakness
References
- http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-087.php3?dis=8.1 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7604 exchange.xforce.ibmcloud.com
- http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-087.php3?dis=8.1 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7604 exchange.xforce.ibmcloud.com