CVE-2009-0912

Published: Mar 16, 2009Modified: Apr 23, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

perl-MDK-Common 1.1.11 and 1.1.24, 1.2.9 through 1.2.14, and possibly other versions, in Mandriva Linux does not properly handle strings when writing them to configuration files, which allows attackers to gain privileges via "special characters" in unspecified vectors.

Affected (11)

Products: Mandriva: Linux, Linux Corporate Server, Multi Network Firewall

Mandriva

3 products

Linux

Linux Corporate Server

Multi Network Firewall

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Mandriva Linux	Version 2008.0
Mandriva Linux	Version 2008.0
Mandriva Linux	Version 2008.1
Mandriva Linux	Version 2008.1
Mandriva Linux	Version 2009.0
Mandriva Linux	Version 2009.0
Mandriva Linux Corporate Server	Version 3.0
Mandriva Linux Corporate Server	Version 3.0
Mandriva Linux Corporate Server	Version 4.0
Mandriva Linux Corporate Server	Version 4.0
Mandriva Multi Network Firewall	Version 2.0