CVE-2001-0084

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

GTK+ library allows local users to specify arbitrary modules via the GTK_MODULES environmental variable, which could allow local users to gain privileges if GTK+ is used by a setuid/setgid program.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-12/0498.htmlExploit
http://archives.neohapsis.com/archives/bugtraq/2001-01/0027.htmlThird Party Advisory
http://www.gtk.org/setuid.htmlThird Party Advisory
http://www.securityfocus.com/bid/2165Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-12/0498.htmlExploit
http://archives.neohapsis.com/archives/bugtraq/2001-01/0027.htmlThird Party Advisory
http://www.gtk.org/setuid.htmlThird Party Advisory
http://www.securityfocus.com/bid/2165Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory

Timeline

Published: Feb 12, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-00857.2Buffer overflow in Kermit communications software in HP-UX 11.0 and earlier allows local users to cause a denial of service and possibly exe CVE-2001-00865.0CGI Script Center Subscribe Me LITE 2.0 and earlier allows remote attackers to delete arbitrary mailing list users without authentication by CVE-2001-00877.2itetris/xitetris 1.6.2 and earlier trusts the PATH environmental variable to find and execute the gunzip program, which allows local users t CVE-2001-00887.5common.inc.php in phpWebLog 0.4.2 does not properly initialize the $CONF array, which inadvertently sets the password to a single character,CVE-2001-00892.6Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE element in an HTML form CVE-2001-00905.1The Print Templates feature in Internet Explorer 5.5 executes arbitrary custom print templates without prompting the user, which could allow CVE-2001-00912.6The ActiveX control for invoking a scriptlet in Internet Explorer 5.0 through 5.5 renders arbitrary file types instead of HTML, which allows CVE-2001-00922.6A function in Internet Explorer 5.0 through 5.5 does not properly verify the domain of a frame within a browser window, which allows a remot CVE-2001-00937.2Vulnerability in telnetd in FreeBSD 1.5 allows local users to gain root privileges by modifying critical environmental variables that affect CVE-2001-00947.2Buffer overflow in kdc_reply_cipher of libkrb (Kerberos 4 authentication library) in NetBSD 1.5 and FreeBSD 4.2 and earlier, as used in Kerb CVE-2001-00951.2catman in Solaris 2.7 and 2.8 allows local users to overwrite arbitrary files via a symlink attack on the sman_PID temporary file.CVE-2001-00965.0FrontPage Server Extensions (FPSE) in IIS 4.0 and 5.0 allows remote attackers to cause a denial of service via a malformed form, aka the "Ma