2.1

CVE-2001-0170

glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing setuid/setgid programs, which could allow local users to read arbitrary files.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Immunix ≫ Immunix Version 7.0_beta
Conectiva ≫ Linux Version 4.0
Conectiva ≫ Linux Version 4.0es
Conectiva ≫ Linux Version 4.1
Conectiva ≫ Linux Version 4.2
Conectiva ≫ Linux Version 5.0
Conectiva ≫ Linux Version 5.1
Conectiva ≫ Linux Version 6.0
Conectiva ≫ Linux Version ecommerce
Conectiva ≫ Linux Version graficas
Debian ≫ Debian Linux Version 2.3
Redhat ≫ Linux Version 7.0 Edition alpha
Redhat ≫ Linux Version 7.0 Edition i386
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.84% 0.531
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://archives.neohapsis.com/archives/bugtraq/2001-01/0131.html
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2001-01/0186.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2001-001.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/2181
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5907