CVEvulnerability
CVE-2009-0912
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-03-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
perl-MDK-Common 1.1.11 and 1.1.24, 1.2.9 through 1.2.14, and possibly other versions, in Mandriva Linux does not properly handle strings when writing them to configuration files, which allows attackers to gain privileges via "special characters" in unspecified vectors.
Affected configurations
• mandriva multi network firewall 2.0
• mandriva linux 2008.0
• mandriva linux 2008.1
• mandriva linux 2009.0
• mandriva linux corporate server 3.0
• mandriva linux corporate server 4.0
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:072 Vendor Advisory
- http://www.securityfocus.com/bid/34089 Patch
- http://www.vupen.com/english/advisories/2009/0688 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49220 exchange.xforce.ibmcloud.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:072 Vendor Advisory
- http://www.securityfocus.com/bid/34089 Patch
- http://www.vupen.com/english/advisories/2009/0688 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49220 exchange.xforce.ibmcloud.com