2.1

CVE-2001-0170

glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing setuid/setgid programs, which could allow local users to read arbitrary files.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Immunix ≫ Immunix Version7.0_beta
Conectiva ≫ Linux Version4.0
Conectiva ≫ Linux Version4.0es
Conectiva ≫ Linux Version4.1
Conectiva ≫ Linux Version4.2
Conectiva ≫ Linux Version5.0
Conectiva ≫ Linux Version5.1
Conectiva ≫ Linux Version6.0
Conectiva ≫ Linux Versionecommerce
Conectiva ≫ Linux Versiongraficas
Debian ≫ Debian Linux Version2.3
Redhat ≫ Linux Version7.0 Editionalpha
Redhat ≫ Linux Version7.0 Editioni386
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.84% 0.531
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://archives.neohapsis.com/archives/bugtraq/2001-01/0131.html
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2001-01/0186.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2001-001.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/2181
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5907