Improper input validation in Mandriva Linux
CVE-2009-0912
perl-MDK-Common 1.1.11 and 1.1.24, 1.2.9 through 1.2.14, and possibly other versions, in Mandriva Linux does not properly handle strings when writing them to configuration files, which allows attackers to gain privileges via "special chara…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.004 (29.9th percentile) — read the EPSS interpretation.
Affected products
- Mandriva Linux — versions 2008.0, 2008.1, 2009.0
- Mandriva Linux_corporate_server — versions 3.0, 4.0
- Mandriva Multi_network_firewall — versions 2.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
- cve@mitre.org (vendor-advisory, x_refsource_MANDRIVA, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)