CVE-2001-1374: expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gain root privileges via a Trojan horse…

PriorityP421high7.2CVSS 2.0

AVLACLAuNCCICAC

EPSS

0.37%

29.5th percentile

expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gain root privileges via a Trojan horse library that is accessed by mkpasswd.

Affected

40 ranges· showing 25

Vendor	Product	Version range	Fixed in
conectiva	linux	—	—
conectiva	linux	—	—
don_libes	expect	—	—
don_libes	expect	—	—
don_libes	expect	—	—
don_libes	expect	—	—
don_libes	expect	—	—
don_libes	expect	—	—
don_libes	expect	—	—
don_libes	expect	—	—
don_libes	expect	—	—
don_libes	expect	—	—
don_libes	expect	—	—
don_libes	expect	—	—
don_libes	expect	—	—
don_libes	expect	—	—
don_libes	expect	—	—
don_libes	expect	—	—
don_libes	expect	—	—
don_libes	expect	—	—
don_libes	expect	—	—
don_libes	expect	—	—
don_libes	expect	—	—
don_libes	expect	—	—
don_libes	expect	—	—

CVSS provenance

nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

vendor_redhat7.2HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.