CVE-2001-1345

State: Published
Severity: Not scored
Published: Jun 25, 2002
Updated: Aug 8, 2024
Reserved: May 1, 2002

Description

bctool in Jetico BestCrypt 0.7 and earlier trusts the user-supplied PATH to find and execute an fsck utility program, which allows local users to gain privileges by modifying the PATH to point to a Trojan horse program.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

20010604 Fatal flaw in BestCrypt <= v0.7 (Linux)mailing-list
2820vdb-entry
bestcrypt-bctool-gain-privileges(6648)vdb-entry
http://www.jetico.com/index.htm#/linux.htm

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.