Unscored severity · published Mar 16, 2009
CVE-2009-0912
perl-MDK-Common 1.1.11 and 1.1.24, 1.2.9 through 1.2.14, and possibly other versions, in Mandriva Linux does not properly handle strings when writing them to configuration files,…
–
CVSS
0.4%
EPSS
No
On KEV
Description
perl-MDK-Common 1.1.11 and 1.1.24, 1.2.9 through 1.2.14, and possibly other versions, in Mandriva Linux does not properly handle strings when writing them to configuration files, which allows attackers to gain privileges via "special characters" in unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Linux · Mandriva
2008.0; 2008.0; 2008.1; 2008.1; 2009.0; 2009.0 · source: NVD
LC
Linux Corporate Server · Mandriva
3.0; 3.0; 4.0; 4.0 · source: NVD
MN
Multi Network Firewall · Mandriva
2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0912
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0912
Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2009:072
Patch
http://www.securityfocus.com/bid/34089
Vendor Advisory
http://www.vupen.com/english/advisories/2009/0688
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/49220
More from Linux
–
CVE-2011-2162
Multiple unspecified vulnerabilities in FFmpeg 0.4.x through 0.6.x, as used in MPlayer 1.0 and other products, in Mandriva Linux 2009.0, 2010.0, and 2010.1; Corporate Server 4.0…
–
CVE-2005-3181
The audit system in Linux kernel 2.6.6, and other versions before 2.6.13.4, when CONFIG_AUDITSYSCALL is enabled, uses an incorrect function to free names_cache memory, which…