Filtered by vendor Paul Jarc Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2001-1324 1 Paul Jarc 1 Idtools 2024-08-08 N/A
cvmlogin and statfile in Paul Jarc idtools before 2001.06.27 do not properly check the return value of a call to the pathexec_env function, which could cause the setstate utility to setuid to the UID environment variable and allow local users to gain privileges.