Unscored CVE-2006-2183 EUVD-2006-2184GHSA-7q94-wqm2-7787

Untrusted search path vulnerability in Truecrypt 4.1, when running suid root on Linux, allows local users to execute arbitrary commands and…

Published May 4, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Untrusted search path vulnerability in Truecrypt 4.1, when running suid root on Linux, allows local users to execute arbitrary commands and gain privileges via a modified PATH environment variable that references a malicious mount command.

References

truecrypt-execvp-gain-privileges(26191) vdb-entry
[Dailydave] 20060430 Non disclosure from security vendors: Truecrypt exemple mailing-list
25131 vdb-entry
ADV-2006-1591 vdb-entry
19903 third-party-advisory
http://www.truecrypt.org/history.php