NVD

Id
48224  
Name
CVE-2009-0912  
Description
perl-MDK-Common 1.1.11 and 1.1.24, 1.2.9 through 1.2.14, and possibly other versions, in Mandriva Linux does not properly handle strings when writing them to configuration files, which allows attackers to gain privileges via "special characters" in unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-03-16  
Modified Date
2009-03-17  
Seq
2009-0912  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
242367 48224 CVE-2009-0912 MDVSA-2009:072  View
242368 48224 CVE-2009-0912 34089  View
242369 48224 CVE-2009-0912 ADV-2009-0688  View
242370 48224 CVE-2009-0912 perlmdkcommon-unspecified-priv-escalation(49220)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
43517 JVNDB-2009-004524 Mandriva Linux の perl-MDK-Common における権限を取得される脆弱性 Mandriva Linux の perl-MDK-Common は、設定ファイルへ書き込む際文字列を適切に処理しないため、権限を取得される脆弱性が存在します。 CVE-2009-0912 38343 CVE-2009-0912 48224 7.2 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004524.html 2009-03-16 2012-09-25 View