CVE-2001-0084

2001-02-0205:00:00

mitre

www.cve.org

AI Score

6.7

Confidence

High

EPSS

Percentile

0.4%

JSON

GTK+ library allows local users to specify arbitrary modules via the GTK_MODULES environmental variable, which could allow local users to gain privileges if GTK+ is used by a setuid/setgid program.

References

archives.neohapsis.com/archives/bugtraq/2000-12/0498.html

archives.neohapsis.com/archives/bugtraq/2001-01/0027.html

www.gtk.org/setuid.html

www.securityfocus.com/bid/2165