CVE-2009-0912
Summary
| CVE | CVE-2009-0912 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2009-03-16 17:30:00 UTC |
| Updated | 2017-08-17 01:30:00 UTC |
| Description | perl-MDK-Common 1.1.11 and 1.1.24, 1.2.9 through 1.2.14, and possibly other versions, in Mandriva Linux does not properly handle strings when writing them to configuration files, which allows attackers to gain privileges via "special characters" in unspecified vectors. |
Risk And Classification
Problem Types: CWE-20
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Mandriva | Linux | 2008.0 | All | All | All |
| Operating System | Mandriva | Linux | 2008.0 | - | x86_64 | All |
| Operating System | Mandriva | Linux | 2008.1 | All | All | All |
| Operating System | Mandriva | Linux | 2008.1 | - | x86_64 | All |
| Operating System | Mandriva | Linux | 2009.0 | All | All | All |
| Operating System | Mandriva | Linux | 2009.0 | - | x86_64 | All |
| Operating System | Mandriva | Linux | 2008.0 | All | All | All |
| Operating System | Mandriva | Linux | 2008.0 | - | x86_64 | All |
| Operating System | Mandriva | Linux | 2008.1 | All | All | All |
| Operating System | Mandriva | Linux | 2008.1 | - | x86_64 | All |
| Operating System | Mandriva | Linux | 2009.0 | All | All | All |
| Operating System | Mandriva | Linux | 2009.0 | - | x86_64 | All |
| Operating System | Mandriva | Linux Corporate Server | 3.0 | All | All | All |
| Operating System | Mandriva | Linux Corporate Server | 3.0 | - | x86_64 | All |
| Operating System | Mandriva | Linux Corporate Server | 4.0 | All | All | All |
| Operating System | Mandriva | Linux Corporate Server | 4.0 | - | x86_64 | All |
| Operating System | Mandriva | Linux Corporate Server | 3.0 | All | All | All |
| Operating System | Mandriva | Linux Corporate Server | 3.0 | - | x86_64 | All |
| Operating System | Mandriva | Linux Corporate Server | 4.0 | All | All | All |
| Operating System | Mandriva | Linux Corporate Server | 4.0 | - | x86_64 | All |
| Application | Mandriva | Multi Network Firewall | 2.0 | All | All | All |
| Application | Mandriva | Multi Network Firewall | 2.0 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Support / Security / Advisories / / MDVSA-2009:072 | Mandriva | MANDRIVA | www.mandriva.com | Vendor Advisory |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| Mandriva perl-MDK-Common Unspecified Privilege Escalation Vulnerability | BID | www.securityfocus.com | Patch |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.