CVEvulnerability
CVE-2001-1374
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2001-07-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gain root privileges via a Trojan horse library that is accessed by mkpasswd.
Affected configurations
• don libes expect 0
• don libes expect 1
• don libes expect 2
• don libes expect 3
• don libes expect 4
• don libes expect 5.0
• don libes expect 5.1
• don libes expect 5.2
• don libes expect 5.3
• don libes expect 5.4
• don libes expect 5.5
• don libes expect 5.6
• don libes expect 5.7
• don libes expect 5.8
• don libes expect 5.9
• don libes expect 5.10
• don libes expect 5.11
• don libes expect 5.12
• don libes expect 5.13
• don libes expect 5.14
• don libes expect 5.15
• don libes expect 5.16
• don libes expect 5.17
• don libes expect 5.18
• don libes expect 5.19
• don libes expect 5.20
• don libes expect 5.21
• don libes expect 5.22
• don libes expect 5.23
• don libes expect 5.24
• don libes expect 5.25
• don libes expect 5.26
• don libes expect 5.27
• don libes expect 5.28
• don libes expect 5.29
• don libes expect 5.30
• don libes expect 5.31
• conectiva linux 6.0
• conectiva linux 7.0
• redhat linux 7.0
References
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000409 distro.conectiva.com.br
- http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:060 www.mandrakesoft.com
- http://www.redhat.com/support/errata/RHSA-2002-148.html www.redhat.com
- http://www.securityfocus.com/bid/3074 Patch, Vendor Advisory
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=22187 bugzilla.redhat.com
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=28224 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6870 exchange.xforce.ibmcloud.com
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000409 distro.conectiva.com.br
- http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:060 www.mandrakesoft.com
- http://www.redhat.com/support/errata/RHSA-2002-148.html www.redhat.com
- http://www.securityfocus.com/bid/3074 Patch, Vendor Advisory
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=22187 bugzilla.redhat.com
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=28224 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6870 exchange.xforce.ibmcloud.com