CVE-2001-0170

No fix known EPSS <1%

glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing setuid/setgid programs, which could allow local users to read arbitrary files.

Published 2001-05-07 · CVE record · OSV

Products: immunix, conectiva linux, debian_linux, redhat linux