CVE-2001-1324 | BDVDB-2026-3910 Detail

Description#

cvmlogin and statfile in Paul Jarc idtools before 2001.06.27 do not properly check the return value of a call to the pathexec_env function, which could cause the setstate utility to setuid to the UID environment variable and allow local users to gain privileges.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://securitytracker.com/id?1001839
http://multivac.cwru.edu/idtools/admin_idtools.tar.bz2
http://www.securityfocus.com/bid/2934

Exploit#

No public exploit known

History#

Version 12002-05-03Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.