CVE-2001-0912: High severity Mandrakesoft Mandrake Linux vulnerability

Published Nov 30, 2001

Updated

Packaging error for expect 8.3.3 in Mandrake Linux 8.1 causes expect to search for its libraries in the /home/snailtalk directory before other directories, which could allow a local user to gain root privileges.

Affected Software

1 affected component

Mandrakesoft Mandrake Linux=8.1

Remediation

Patch Available

http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-087.php3?dis=8.1

Event History

Nov 30, 2001

CVE Published

05:00 AM

Jun 25, 2002

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0912?

CVE-2001-0912 is considered a high severity vulnerability due to its potential to allow local users to gain root privileges.

How do I fix CVE-2001-0912?

To fix CVE-2001-0912, it is recommended to upgrade expect to a version where this packaging error has been resolved.

Who is affected by CVE-2001-0912?

CVE-2001-0912 affects users of Mandrake Linux 8.1 who have the expect 8.3.3 package installed.

What is the exploit for CVE-2001-0912?

The exploit for CVE-2001-0912 allows local users to manipulate library paths, potentially gaining elevated privileges.

Is there a patch available for CVE-2001-0912?

There is no specific patch for CVE-2001-0912; users must update the expect package to resolve the issue.