CVE-2009-0912

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

perl-MDK-Common 1.1.11 and 1.1.24, 1.2.9 through 1.2.14, and possibly other versions, in Mandriva Linux does not properly handle strings when writing them to configuration files, which allows attackers to gain privileges via "special characters" in unspecified vectors.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.mandriva.com/security/advisories?name=MDVSA-2009:072Vendor Advisory
http://www.securityfocus.com/bid/34089Patch
http://www.vupen.com/english/advisories/2009/0688Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49220
http://www.mandriva.com/security/advisories?name=MDVSA-2009:072Vendor Advisory
http://www.securityfocus.com/bid/34089Patch
http://www.vupen.com/english/advisories/2009/0688Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49220

Timeline

Published: Mar 16, 2009
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2009

CVE-2009-09134.7Unspecified vulnerability in the keysock kernel module in Solaris 10 and OpenSolaris builds snv_01 through snv_108 allows local users to cau CVE-2009-09149.3Opera before 9.64 allows remote attackers to execute arbitrary code via a crafted JPEG image that triggers memory corruption.CVE-2009-09156.8Opera before 9.64 allows remote attackers to conduct cross-domain scripting attacks via unspecified vectors related to plug-ins.CVE-2009-091610.0Unspecified vulnerability in Opera before 9.64 has unknown impact and attack vectors, related to a "moderately severe issue."CVE-2009-09174.3Cross-site scripting (XSS) vulnerability in DFLabs PTK 1.0.0 through 1.0.4 allows remote attackers to inject arbitrary web script or HTML by CVE-2009-09187.5Multiple unspecified vulnerabilities in DFLabs PTK 1.0.0 through 1.0.4 allow remote attackers to execute arbitrary commands in processes lau CVE-2009-09197.5XAMPP installs multiple packages with insecure default passwords, which makes it easier for remote attackers to obtain access via (1) the "l CVE-2009-09207.5Stack-based buffer overflow in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers t CVE-2009-092110.0Multiple heap-based buffer overflows in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote att CVE-2009-09224.0PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumptio CVE-2009-09237.8Unspecified vulnerability in Kerberos Incremental Propagation in Solaris 10 and OpenSolaris snv_01 through snv_110 allows remote attackers t CVE-2009-09244.7Unspecified vulnerability in Sun OpenSolaris snv_39 through snv_45, when running in 64-bit mode on x86 architectures, allows local users to