Unscored CVE-2001-0370 EUVD-2001-0367GHSA-jjvg-h9px-64cf

fcheck prior to 2.57.59 calls the file signature checking program insecurely, which can allow a local user to run arbitrary commands via a …

Published May 24, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

fcheck prior to 2.57.59 calls the file signature checking program insecurely, which can allow a local user to run arbitrary commands via a file name that contains shell metacharacters.

References

fcheck-open-execute-commands(6256) vdb-entry
20010320 fcheck prior to 2.07.59 - vulnerability - improper use of perl 'magic open' mailing-list