Vulnerabilities > Mandrakesoft > Mandrake Linux Corporate Server > 1.0.1

DATE	CVE	VULNERABILITY TITLE	RISK
2001-03-26	CVE-2001-0169	When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib. local low complexity mandrakesoft redhat trustix turbolinux	2.1
2001-03-12	CVE-2001-0138	privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack. local high complexity immunix debian mandrakesoft redhat	1.2
2001-03-12	CVE-2001-0125	exmh 2.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the exmhErrorMsg temporary file. local high complexity exmh debian mandrakesoft	1.2
2001-03-12	CVE-2001-0117	sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack. local high complexity immunix mandrakesoft redhat trustix	1.2

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.