Vulnerabilities > CVE-2001-0370 - Local Security vulnerability in FCheck

047910
CVSS 4.6 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
local
low complexity
michael-a-gumienny

Summary

fcheck prior to 2.57.59 calls the file signature checking program insecurely, which can allow a local user to run arbitrary commands via a file name that contains shell metacharacters.

Vulnerable Configurations

Part Description Count
Application
Michael_A._Gumienny
1