CVE-2009-1601: Medium severity Ubuntu Linux vulnerability

Published May 11, 2009

Updated

The Ubuntu clamav-milter.init script in clamav-milter before 0.95.1+dfsg-1ubuntu1.2 in Ubuntu 9.04 sets the ownership of the current working directory to the clamav account, which might allow local users to bypass intended access restrictions via read or write operations involving this directory.

Affected Software

1 affected component

Ubuntu Linux=9.04

Remediation

Patch Available

http://www.securityfocus.com/bid/34818

Event History

May 11, 2009

CVE Published

via MITRE·03:19 PM

Data Sourced

via MITRE·03:19 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-1601?

CVE-2009-1601 is considered a medium severity vulnerability due to potential local privilege escalation.

How do I fix CVE-2009-1601?

To fix CVE-2009-1601, update to the latest version of clamav-milter that addresses this issue.

What systems are affected by CVE-2009-1601?

CVE-2009-1601 affects Ubuntu 9.04 systems running the clamav-milter before version 0.95.1+dfsg-1ubuntu1.2.

What are the implications of CVE-2009-1601?

The implications of CVE-2009-1601 include the potential for local users to gain unauthorized access to files in the clamav-milter working directory.

Is CVE-2009-1601 still relevant today?

While CVE-2009-1601 targets an outdated version of Ubuntu, it is relevant for environments still using that version.