CVE-2001-1272

wmtv 0.6.5 and earlier does not properly drop privileges, which allows local users to execute arbitrary commands via the -e (external command) option.

Score

CVSS 2.0 4.6 Medium

Status

Modified - cve@mitre.org

Published

2001-12-06

Last modified

2024-08-08

Affected products

• Wmtv (Wliang)

References

• http://www.debian.org/security/2001/dsa-092
• http://www.iss.net/security_center/static/7669.php
• http://www.securityfocus.com/bid/3658