CVE-2001-0169: mandrakesoft mandrake_linux
Vulnerability summary
CVE-2001-0169 is a low (CVSS 2.1) vulnerability in mandrakesoft mandrake_linux. EPSS estimates a 0.86% chance of exploitation in the next 30 days, higher than 57.7% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 07-05-2001PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.86%
Chance of exploitation in the next 30 days
Percentile
58%
Versus all other CVEs
30-day change
0.00 pp
From 0.86% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundGLIBC 2.1.3 - 'LD_PRELOAD' Local Privilege Escalation
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Mandrakesoft2 products
- mandrake_linux6.0 | 6.1 | 7.0 | 7.1 | 7.2
- mandrake_linux_corporate_server1.0.1
Redhat1 product
- linux6.0 | 6.1 | 6.2
Trustix1 product
- secure_linux1.1 | 1.2
Turbolinux1 product
- turbolinux≤ 6.0.5 | 6.1
4 vendors · 5 products
References
9 links
- www.linux-mandrake.com/en/security/2001/MDKSA-2001-012.php3?dis=7.2Vendor AdvisoryX Refsource MANDRAKEPatch
- www.calderasystems.com/support/security/advisories/CSSA-2001-007.0.txtVendor AdvisoryX Refsource CALDERA