Vulnerabilities > Paul Jarc

DATE CVE VULNERABILITY TITLE RISK
2001-06-26 CVE-2001-1324 Unspecified vulnerability in Paul Jarc Idtools 20010531/20010608
cvmlogin and statfile in Paul Jarc idtools before 2001.06.27 do not properly check the return value of a call to the pathexec_env function, which could cause the setstate utility to setuid to the UID environment variable and allow local users to gain privileges.
local
low complexity
paul-jarc
4.6