CVE-2001-1375: Medium severity Conectiva Linux vulnerability
tcl/tk package (tcltk) 8.3.1 searches for its libraries in the current working directory before other directories, which could allow local users to execute arbitrary code via a Trojan horse library that is under a user-controlled directory.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2001-1375?
CVE-2001-1375 has a medium to high severity due to the potential for local users to execute arbitrary code.
How do I fix CVE-2001-1375?
To fix CVE-2001-1375, ensure that the working directory is not included in the library search path or upgrade to a version of tcl/tk that addresses this issue.
What systems are affected by CVE-2001-1375?
CVE-2001-1375 affects Conectiva Linux versions 6.0 and 7.0, as well as Red Hat Linux version 7.0.
What kind of attack can CVE-2001-1375 facilitate?
CVE-2001-1375 can facilitate local privilege escalation attacks through the execution of Trojan horse libraries.
Who is at risk from CVE-2001-1375?
Local users with access to the affected systems are at risk from CVE-2001-1375.