CVE-2001-1324

cvmlogin and statfile in Paul Jarc idtools before 2001.06.27 do not properly check the return value of a call to the pathexec_env function, which could cause…

published May 3, 2002

CVSS
—
EPSS
0%
Percentile
24.2
In the wild
Unconfirmed
What it is

cvmlogin and statfile in Paul Jarc idtools before 2001.06.27 do not properly check the return value of a call to the pathexec_env function, which could cause the setstate utility to setuid to the UID environment variable and allow local users to gain privileges.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00326 · 24.2th percentile
Published
2002-05-03T04:00Z
EPSS history
Timeline
  • 03 MAY 04:00Z
    cvmlogin and statfile in Paul Jarc idtools before 2001.06.27 do not properly check the return value of a call to the pathexec_env function, which could cause…
    cvelistv5