Description
perl-MDK-Common 1.1.11 and 1.1.24, 1.2.9 through 1.2.14, and possibly other versions, in Mandriva Linux does not properly handle strings when writing them to configuration files, which allows attackers to gain privileges via "special characters" in unspecified vectors.
References
- perlmdkcommon-unspecified-priv-escalation(49220) vdb-entry
- 34089 vdb-entry
- MDVSA-2009:072 vendor-advisory
- ADV-2009-0688 vdb-entry