2 matches found
CVE-2019-4447
IBM DB2 High Performance Unload load for LUW 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2 db2hpumdebug is a setuid root binary which trusts the PATH environment variable. A low privileged user can execute arbitrary commands as root by altering the PATH variable to point to a...
CVE-2000-0231
The CVE-2000-0231 entry describes a vulnerability in Linux kreatecd where a user-supplied path is trusted to locate the cdrecord program. This allows local users to gain root privileges due to the underlying trust in an attacker-controlled path. Affected component: kreatecd (Linux). Root cause: t...