CVE-2001-1345

The CVE concerns bctool in Jetico BestCrypt 0.7 and earlier, which trusts a user-supplied PATH to locate and execute an fsck utility. This PATH manipulation allows local users to gain privileges by renaming or placing a Trojan horse program earlier in PATH. Affected component: bctool within Jetic...