CVE-2009-0912

2009-03-1617:30:00

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

25.1%

JSON

perl-MDK-Common 1.1.11 and 1.1.24, 1.2.9 through 1.2.14, and possibly other versions, in Mandriva Linux does not properly handle strings when writing them to configuration files, which allows attackers to gain privileges via “special characters” in unspecified vectors.

Affected configurations

Nvd

Node

mandrivamulti_network_firewallMatch2.0

mandrivalinuxMatch2008.0

mandrivalinuxMatch2008.0-x86_64

mandrivalinuxMatch2008.1

mandrivalinuxMatch2008.1-x86_64

mandrivalinuxMatch2009.0

mandrivalinuxMatch2009.0-x86_64

mandrivalinux_corporate_serverMatch3.0

mandrivalinux_corporate_serverMatch3.0-x86_64

mandrivalinux_corporate_serverMatch4.0

mandrivalinux_corporate_serverMatch4.0-x86_64

VendorProductVersionCPE
mandrivamulti_network_firewall2.0cpe:2.3:a:mandriva:multi_network_firewall:2.0:*:*:*:*:*:*:*
mandrivalinux2008.0cpe:2.3:o:mandriva:linux:2008.0:*:*:*:*:*:*:*
mandrivalinux2008.0cpe:2.3:o:mandriva:linux:2008.0:-:x86_64:*:*:*:*:*
mandrivalinux2008.1cpe:2.3:o:mandriva:linux:2008.1:*:*:*:*:*:*:*
mandrivalinux2008.1cpe:2.3:o:mandriva:linux:2008.1:-:x86_64:*:*:*:*:*
mandrivalinux2009.0cpe:2.3:o:mandriva:linux:2009.0:*:*:*:*:*:*:*
mandrivalinux2009.0cpe:2.3:o:mandriva:linux:2009.0:-:x86_64:*:*:*:*:*
mandrivalinux_corporate_server3.0cpe:2.3:o:mandriva:linux_corporate_server:3.0:*:*:*:*:*:*:*
mandrivalinux_corporate_server3.0cpe:2.3:o:mandriva:linux_corporate_server:3.0:-:x86_64:*:*:*:*:*
mandrivalinux_corporate_server4.0cpe:2.3:o:mandriva:linux_corporate_server:4.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mandriva	multi_network_firewall	2.0	cpe:2.3:a:mandriva:multi_network_firewall:2.0:::::::*
mandriva	linux	2008.0	cpe:2.3:o:mandriva:linux:2008.0:::::::*
mandriva	linux	2008.0	cpe:2.3:o:mandriva:linux:2008.0:-:x86_64:::::*
mandriva	linux	2008.1	cpe:2.3:o:mandriva:linux:2008.1:::::::*
mandriva	linux	2008.1	cpe:2.3:o:mandriva:linux:2008.1:-:x86_64:::::*
mandriva	linux	2009.0	cpe:2.3:o:mandriva:linux:2009.0:::::::*
mandriva	linux	2009.0	cpe:2.3:o:mandriva:linux:2009.0:-:x86_64:::::*
mandriva	linux_corporate_server	3.0	cpe:2.3:o:mandriva:linux_corporate_server:3.0:::::::*
mandriva	linux_corporate_server	3.0	cpe:2.3:o:mandriva:linux_corporate_server:3.0:-:x86_64:::::*
mandriva	linux_corporate_server	4.0	cpe:2.3:o:mandriva:linux_corporate_server:4.0:::::::*