CVE-2009-0912: Input Validation
First published: Mon Mar 16 2009(Updated: )
perl-MDK-Common 1.1.11 and 1.1.24, 1.2.9 through 1.2.14, and possibly other versions, in Mandriva Linux does not properly handle strings when writing them to configuration files, which allows attackers to gain privileges via "special characters" in unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mandrakesoft Mandrake Multi Network Firewall | =2.0 | |
| Mandrake Linux | =2008.0 | |
| Mandrake Linux | =2008.0 | |
| Mandrake Linux | =2008.1 | |
| Mandrake Linux | =2008.1 | |
| Mandrake Linux | =2009.0 | |
| Mandrake Linux | =2009.0 | |
| Mandriva Linux Corporate Server | =3.0 | |
| Mandriva Linux Corporate Server | =3.0 | |
| Mandriva Linux Corporate Server | =4.0 | |
| Mandriva Linux Corporate Server | =4.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2009-0912?
CVE-2009-0912 is considered important as it allows attackers to gain elevated privileges on affected Mandriva Linux systems.
How do I fix CVE-2009-0912?
To fix CVE-2009-0912, users should upgrade to the patched versions of perl-MDK-Common as provided in Mandriva's security advisories.
What versions are affected by CVE-2009-0912?
CVE-2009-0912 affects perl-MDK-Common versions 1.1.11, 1.1.24, and 1.2.9 through 1.2.14, along with potentially other versions.
What type of systems are impacted by CVE-2009-0912?
CVE-2009-0912 impacts Mandriva Linux and Mandriva Linux Corporate Server installations.
Can CVE-2009-0912 lead to unauthorized access?
Yes, CVE-2009-0912 can lead to unauthorized access as it allows attackers to exploit improperly handled strings in configuration files.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/description
- agent/remedy
- agent/author
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/first-publish-date
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/mandriva
- canonical/mandrakesoft mandrake multi network firewall
- version/mandrakesoft mandrake multi network firewall/2.0
- canonical/mandrake linux
- version/mandrake linux/2008.0
- version/mandrake linux/2008.1
- version/mandrake linux/2009.0
- canonical/mandriva linux corporate server
- version/mandriva linux corporate server/3.0
- version/mandriva linux corporate server/4.0