expect prior to 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gain root privileges via a Trojan horse library that is accessed by mkpasswd.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
don libes expect 5.10 |
||
don libes expect 5.11 |
||
don libes expect 5.18 |
||
don libes expect 5.19 |
||
don libes expect 5.25 |
||
don libes expect 5.0 |
||
don libes expect 5.1 |
||
don libes expect 5.16 |
||
don libes expect 5.17 |
||
don libes expect 5.23 |
||
don libes expect 5.24 |
||
don libes expect 5.31 |
||
don libes expect 5.4 |
||
conectiva linux 7.0 |
||
don libes expect 3 |
||
don libes expect 4 |
||
don libes expect 5.14 |
||
don libes expect 5.15 |
||
don libes expect 5.21 |
||
don libes expect 5.22 |
||
don libes expect 5.3 |
||
don libes expect 5.30 |
||
don libes expect 5.9 |
||
conectiva linux 6.0 |
||
don libes expect 5.26 |
||
don libes expect 5.27 |
||
don libes expect 5.5 |
||
don libes expect 5.6 |
||
don libes expect 0 |
||
don libes expect 1 |
||
don libes expect 2 |
||
don libes expect 5.12 |
||
don libes expect 5.13 |
||
don libes expect 5.2 |
||
don libes expect 5.20 |
||
don libes expect 5.28 |
||
don libes expect 5.29 |
||
don libes expect 5.7 |
||
don libes expect 5.8 |
||
redhat linux 7.0 |
Vulmon