CVEvulnerability

CVE-2001-1374

7.2 HIGH Published 2001-07-19 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-07-19
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gain root privileges via a Trojan horse library that is accessed by mkpasswd.

Affected configurations

• don libes expect 0 • don libes expect 1 • don libes expect 2 • don libes expect 3 • don libes expect 4 • don libes expect 5.0 • don libes expect 5.1 • don libes expect 5.2 • don libes expect 5.3 • don libes expect 5.4 • don libes expect 5.5 • don libes expect 5.6 • don libes expect 5.7 • don libes expect 5.8 • don libes expect 5.9 • don libes expect 5.10 • don libes expect 5.11 • don libes expect 5.12 • don libes expect 5.13 • don libes expect 5.14 • don libes expect 5.15 • don libes expect 5.16 • don libes expect 5.17 • don libes expect 5.18 • don libes expect 5.19 • don libes expect 5.20 • don libes expect 5.21 • don libes expect 5.22 • don libes expect 5.23 • don libes expect 5.24 • don libes expect 5.25 • don libes expect 5.26 • don libes expect 5.27 • don libes expect 5.28 • don libes expect 5.29 • don libes expect 5.30 • don libes expect 5.31 • conectiva linux 6.0 • conectiva linux 7.0 • redhat linux 7.0

References