CVE-2001-1374 (CNNVD-200107-124)
HIGH
中文标题:
TCL/TK expect不安全的库搜索路径漏洞
英文标题:
expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allo...
CVSS分数:
7.2
发布时间:
2003-04-02 05:00:00
漏洞类型:
授权问题
状态:
PUBLISHED
数据质量分数:
0.30
数据版本:
v3
漏洞描述
中文描述:
Tcl是一种流行的命令编程语言，可以很方便地利用它来向一些交互程序发布命令。它还包括一个库软件包，里面包括Tcl语言解释器、实现内置Tcl命令的例程、以及一些扩展功能。TK是Tcl的一个扩展，用来为程序员提供一个与X11 Windows系统的编程接口。一些Linux系统带的Tcl/Tk开发环境中含有一些应用程序：tcl、tk、tix、tclX、expect和itcl。 Tcl/tk软件包中所带的expect应用程序5.32之前版本在搜索自己的库文件时采用了不安全的搜索路径，可能允许本地用户提升权限。 expect在搜索其它目录之前会首先在一个临时目录/var/tmp下搜索自己的库libexpect5.31.so，如果这个目录下库文件存在且有效，Expect就会加载这个库。本地用户可以在该目录下创建一个木马库程序。当其他用户(例如root用户)调用任何使用expect的程序时，就可能执行攻击者指定的任意代码。某些Linux系统所带的mkpasswd程序就使用expect来为用户创建随机口令，当root用户调用mkpasswd时，攻击者就可能获取本地root权限。
英文描述:
expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gain root privileges via a Trojan horse library that is accessed by mkpasswd.
CWE类型:
（暂无数据）
标签:
（暂无数据）
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| don_libes | expect | 0 | - | - |
cpe:2.3:a:don_libes:expect:0:*:*:*:*:*:*:*
|
| don_libes | expect | 1 | - | - |
cpe:2.3:a:don_libes:expect:1:*:*:*:*:*:*:*
|
| don_libes | expect | 2 | - | - |
cpe:2.3:a:don_libes:expect:2:*:*:*:*:*:*:*
|
| don_libes | expect | 3 | - | - |
cpe:2.3:a:don_libes:expect:3:*:*:*:*:*:*:*
|
| don_libes | expect | 4 | - | - |
cpe:2.3:a:don_libes:expect:4:*:*:*:*:*:*:*
|
| don_libes | expect | 5.0 | - | - |
cpe:2.3:a:don_libes:expect:5.0:*:*:*:*:*:*:*
|
| don_libes | expect | 5.1 | - | - |
cpe:2.3:a:don_libes:expect:5.1:*:*:*:*:*:*:*
|
| don_libes | expect | 5.2 | - | - |
cpe:2.3:a:don_libes:expect:5.2:*:*:*:*:*:*:*
|
| don_libes | expect | 5.3 | - | - |
cpe:2.3:a:don_libes:expect:5.3:*:*:*:*:*:*:*
|
| don_libes | expect | 5.4 | - | - |
cpe:2.3:a:don_libes:expect:5.4:*:*:*:*:*:*:*
|
| don_libes | expect | 5.5 | - | - |
cpe:2.3:a:don_libes:expect:5.5:*:*:*:*:*:*:*
|
| don_libes | expect | 5.6 | - | - |
cpe:2.3:a:don_libes:expect:5.6:*:*:*:*:*:*:*
|
| don_libes | expect | 5.7 | - | - |
cpe:2.3:a:don_libes:expect:5.7:*:*:*:*:*:*:*
|
| don_libes | expect | 5.8 | - | - |
cpe:2.3:a:don_libes:expect:5.8:*:*:*:*:*:*:*
|
| don_libes | expect | 5.9 | - | - |
cpe:2.3:a:don_libes:expect:5.9:*:*:*:*:*:*:*
|
| don_libes | expect | 5.10 | - | - |
cpe:2.3:a:don_libes:expect:5.10:*:*:*:*:*:*:*
|
| don_libes | expect | 5.11 | - | - |
cpe:2.3:a:don_libes:expect:5.11:*:*:*:*:*:*:*
|
| don_libes | expect | 5.12 | - | - |
cpe:2.3:a:don_libes:expect:5.12:*:*:*:*:*:*:*
|
| don_libes | expect | 5.13 | - | - |
cpe:2.3:a:don_libes:expect:5.13:*:*:*:*:*:*:*
|
| don_libes | expect | 5.14 | - | - |
cpe:2.3:a:don_libes:expect:5.14:*:*:*:*:*:*:*
|
| don_libes | expect | 5.15 | - | - |
cpe:2.3:a:don_libes:expect:5.15:*:*:*:*:*:*:*
|
| don_libes | expect | 5.16 | - | - |
cpe:2.3:a:don_libes:expect:5.16:*:*:*:*:*:*:*
|
| don_libes | expect | 5.17 | - | - |
cpe:2.3:a:don_libes:expect:5.17:*:*:*:*:*:*:*
|
| don_libes | expect | 5.18 | - | - |
cpe:2.3:a:don_libes:expect:5.18:*:*:*:*:*:*:*
|
| don_libes | expect | 5.19 | - | - |
cpe:2.3:a:don_libes:expect:5.19:*:*:*:*:*:*:*
|
| don_libes | expect | 5.20 | - | - |
cpe:2.3:a:don_libes:expect:5.20:*:*:*:*:*:*:*
|
| don_libes | expect | 5.21 | - | - |
cpe:2.3:a:don_libes:expect:5.21:*:*:*:*:*:*:*
|
| don_libes | expect | 5.22 | - | - |
cpe:2.3:a:don_libes:expect:5.22:*:*:*:*:*:*:*
|
| don_libes | expect | 5.23 | - | - |
cpe:2.3:a:don_libes:expect:5.23:*:*:*:*:*:*:*
|
| don_libes | expect | 5.24 | - | - |
cpe:2.3:a:don_libes:expect:5.24:*:*:*:*:*:*:*
|
| don_libes | expect | 5.25 | - | - |
cpe:2.3:a:don_libes:expect:5.25:*:*:*:*:*:*:*
|
| don_libes | expect | 5.26 | - | - |
cpe:2.3:a:don_libes:expect:5.26:*:*:*:*:*:*:*
|
| don_libes | expect | 5.27 | - | - |
cpe:2.3:a:don_libes:expect:5.27:*:*:*:*:*:*:*
|
| don_libes | expect | 5.28 | - | - |
cpe:2.3:a:don_libes:expect:5.28:*:*:*:*:*:*:*
|
| don_libes | expect | 5.29 | - | - |
cpe:2.3:a:don_libes:expect:5.29:*:*:*:*:*:*:*
|
| don_libes | expect | 5.30 | - | - |
cpe:2.3:a:don_libes:expect:5.30:*:*:*:*:*:*:*
|
| don_libes | expect | 5.31 | - | - |
cpe:2.3:a:don_libes:expect:5.31:*:*:*:*:*:*:*
|
| conectiva | linux | 6.0 | - | - |
cpe:2.3:o:conectiva:linux:6.0:*:*:*:*:*:*:*
|
| conectiva | linux | 7.0 | - | - |
cpe:2.3:o:conectiva:linux:7.0:*:*:*:*:*:*:*
|
| redhat | linux | 7.0 | - | - |
cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
（暂无数据）
英文解决方案:
（暂无数据）
临时解决方案:
（暂无数据）
CVSS评分详情
7.2
HIGH
CVSS向量:
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS版本:
2.0
机密性
COMPLETE
完整性
COMPLETE
可用性
COMPLETE
时间信息
发布时间:
2003-04-02 05:00:00
修改时间:
2024-08-08 04:51:08
创建时间:
2025-11-11 15:32:15
更新时间:
2025-11-11 15:48:46
利用信息
暂无可利用代码信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2001-1374 |
2025-11-11 15:17:22 | 2025-11-11 07:32:15 |
| NVD | nvd_CVE-2001-1374 |
2025-11-11 14:50:26 | 2025-11-11 07:41:01 |
| CNNVD | cnnvd_CNNVD-200107-124 |
2025-11-11 15:08:40 | 2025-11-11 07:48:46 |
版本与语言
当前版本:
v3
主要语言:
EN
支持语言:
EN
ZH
安全公告
暂无安全公告信息
变更历史
v3
CNNVD
2025-11-11 15:48:46
vulnerability_type: 未提取 → 授权问题; cnnvd_id: 未提取 → CNNVD-200107-124; data_sources: ['cve', 'nvd'] → ['cnnvd', 'cve', 'nvd']
查看详细变更
- vulnerability_type: 未提取 -> 授权问题
- cnnvd_id: 未提取 -> CNNVD-200107-124
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
v2
NVD
2025-11-11 15:41:01
severity: SeverityLevel.MEDIUM → SeverityLevel.HIGH; cvss_score: 未提取 → 7.2; cvss_vector: NOT_EXTRACTED → AV:L/AC:L/Au:N/C:C/I:C/A:C; cvss_version: NOT_EXTRACTED → 2.0; affected_products_count: 0 → 40; data_sources: ['cve'] → ['cve', 'nvd']
查看详细变更
- severity: SeverityLevel.MEDIUM -> SeverityLevel.HIGH
- cvss_score: 未提取 -> 7.2
- cvss_vector: NOT_EXTRACTED -> AV:L/AC:L/Au:N/C:C/I:C/A:C
- cvss_version: NOT_EXTRACTED -> 2.0
- affected_products_count: 0 -> 40
- data_sources: ['cve'] -> ['cve', 'nvd']