Lucene search
HistoryJul 19, 2001 - 4:00 a.m.
CVE-2001-1375
cve-2001-1375
tcl/tk package
trojan horse
code execution
nvd.
7.3 High
AI Score
Confidence
High
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.3%
tcl/tk package (tcltk) 8.3.1 searches for its libraries in the current working directory before other directories, which could allow local users to execute arbitrary code via a Trojan horse library that is under a user-controlled directory.
| CPE | Name | Operator | Version |
|---|---|---|---|
| conectiva:linux | conectiva linux | eq | 6.0 |
| conectiva:linux | conectiva linux | eq | 7.0 |
| redhat:linux | redhat linux | eq | 7.0 |
7.3 High
AI Score
Confidence
High
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.3%
Related for CVE-2001-1375