PT-2001-2452 · Pmake · Pmake

Published 2001-05-24 · Updated 2008-09-05 · CVE-2001-1327

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: pmake versions prior to 2.1.35

Description: The issue is related to pmake being installed with setuid root privileges, which could allow local users to gain privileges by exploiting vulnerabilities in pmake or programs used by pmake.

Recommendations: For versions prior to 2.1.35, update to version 2.1.35 or later to resolve the issue.

Fix

Related Identifiers

CVE-2001-1327

Affected Products

Pmake

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2001-1327 · Security Note
• http://turbolinux.com/pipermail/tl-security-announce/2001-May/000313.html · Vendor Advisory
• http://iss.net/security_center/static/9988.php · Note