PT-2001-2066 · Mandrake+1 · Mandrake Linux+1

Published 2001-11-30 · Updated 2017-10-10 · CVE-2001-0912

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mandrake Linux version 8.1 expect version 8.3.3

Description A packaging error in expect 8.3.3 for Mandrake Linux 8.1 causes expect to search for its libraries in the /home/snailtalk directory before other directories. This could allow a local user to gain root privileges.

Recommendations For Mandrake Linux 8.1 with expect 8.3.3, consider reconfiguring the library search path to prevent expect from searching the /home/snailtalk directory first. As a temporary workaround, restrict access to the /home/snailtalk directory to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2001-0912

Affected Products

Mandrake Linux

Expect

References · 3

• http://linux-mandrake.com/en/security/2001/MDKSA-2001-087.php3?dis=8.1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0912 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7604 · Note