PT-2001-2452 · Pmake · Pmake

Publicado 2001-05-24 · Atualizado 2008-09-05 · CVE-2001-1327

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: pmake versions prior to 2.1.35

Description: The issue is related to pmake being installed with setuid root privileges, which could allow local users to gain privileges by exploiting vulnerabilities in pmake or programs used by pmake.

Recommendations: For versions prior to 2.1.35, update to version 2.1.35 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2001-1327

Produtos afetados

Pmake

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2001-1327 · Nota de Segurança
• http://turbolinux.com/pipermail/tl-security-announce/2001-May/000313.html · Aviso do Fabricante
• http://iss.net/security_center/static/9988.php · Nota