CVE-2001-1272

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

wmtv 0.6.5 and earlier does not properly drop privileges, which allows local users to execute arbitrary commands via the -e (external command) option.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.debian.org/security/2001/dsa-092Vendor Advisory
http://www.iss.net/security_center/static/7669.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/3658Vendor Advisory
http://www.debian.org/security/2001/dsa-092Vendor Advisory
http://www.iss.net/security_center/static/7669.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/3658Vendor Advisory

Timeline

Published: Dec 6, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-12732.1The "mxcsr P4" vulnerability in the Linux kernel before 2.2.17-14, when running on certain Intel CPUs, allows local users to cause a denial CVE-2001-12747.5Buffer overflow in MySQL before 3.23.31 allows attackers to cause a denial of service and possibly gain privileges.CVE-2001-12757.2MySQL before 3.23.31 allows users with a MySQL account to use the SHOW GRANTS command to obtain the encrypted administrator password from th CVE-2001-12761.2ispell before 3.1.20 allows local users to overwrite files of other users via a symlink attack on a temporary file.CVE-2001-12772.1makewhatis in the man package before 1.5i2 allows an attacker in group man to overwrite arbitrary files via a man page whose name contains s CVE-2001-12787.5Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt at CVE-2001-12797.5Buffer overflow in print-rx.c of tcpdump 3.x (probably 3.6x) allows remote attackers to cause a denial of service and possibly execute arbit CVE-2001-12805.0POP3 Server for Ipswitch IMail 7.04 and earlier generates different responses to valid and invalid user names, which allows remote attackers CVE-2001-12815.0Web Messaging Server for Ipswitch IMail 7.04 and earlier allows remote authenticated users to change information for other users by modifyin CVE-2001-12825.0Ipswitch IMail 7.04 and earlier records the physical path of attachments in an e-mail message header, which could allow remote attackers to CVE-2001-12837.5The webmail interface for Ipswitch IMail 7.04 and earlier allows remote authenticated users to cause a denial of service (crash) via a mailb CVE-2001-12847.5Ipswitch IMail 7.04 and earlier uses predictable session IDs for authentication, which allows remote attackers to hijack sessions of other u