// For flags

CVE-2001-0170

glibc-2.2 / openssh-2.3.0p1 / glibc 2.1.9x - File Read

Severity Score

2.1
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

2
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing setuid/setgid programs, which could allow local users to read arbitrary files.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
None
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 1996-01-01 First Exploit
  • 2001-03-08 CVE Reserved
  • 2001-03-26 CVE Published
  • 2023-03-08 EPSS Updated
  • 2024-08-08 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Immunix
Search vendor "Immunix"
Immunix
Search vendor "Immunix" for product "Immunix"
7.0_beta
Search vendor "Immunix" for product "Immunix" and version "7.0_beta"
-
Affected
Conectiva
Search vendor "Conectiva"
Linux
Search vendor "Conectiva" for product "Linux"
4.0
Search vendor "Conectiva" for product "Linux" and version "4.0"
-
Affected
Conectiva
Search vendor "Conectiva"
Linux
Search vendor "Conectiva" for product "Linux"
4.0es
Search vendor "Conectiva" for product "Linux" and version "4.0es"
-
Affected
Conectiva
Search vendor "Conectiva"
Linux
Search vendor "Conectiva" for product "Linux"
4.1
Search vendor "Conectiva" for product "Linux" and version "4.1"
-
Affected
Conectiva
Search vendor "Conectiva"
Linux
Search vendor "Conectiva" for product "Linux"
4.2
Search vendor "Conectiva" for product "Linux" and version "4.2"
-
Affected
Conectiva
Search vendor "Conectiva"
Linux
Search vendor "Conectiva" for product "Linux"
5.0
Search vendor "Conectiva" for product "Linux" and version "5.0"
-
Affected
Conectiva
Search vendor "Conectiva"
Linux
Search vendor "Conectiva" for product "Linux"
5.1
Search vendor "Conectiva" for product "Linux" and version "5.1"
-
Affected
Conectiva
Search vendor "Conectiva"
Linux
Search vendor "Conectiva" for product "Linux"
6.0
Search vendor "Conectiva" for product "Linux" and version "6.0"
-
Affected
Conectiva
Search vendor "Conectiva"
Linux
Search vendor "Conectiva" for product "Linux"
ecommerce
Search vendor "Conectiva" for product "Linux" and version "ecommerce"
-
Affected
Conectiva
Search vendor "Conectiva"
Linux
Search vendor "Conectiva" for product "Linux"
graficas
Search vendor "Conectiva" for product "Linux" and version "graficas"
-
Affected
Debian
Search vendor "Debian"
Debian Linux
Search vendor "Debian" for product "Debian Linux"
2.3
Search vendor "Debian" for product "Debian Linux" and version "2.3"
-
Affected
Redhat
Search vendor "Redhat"
Linux
Search vendor "Redhat" for product "Linux"
7.0
Search vendor "Redhat" for product "Linux" and version "7.0"
alpha
Affected
Redhat
Search vendor "Redhat"
Linux
Search vendor "Redhat" for product "Linux"
7.0
Search vendor "Redhat" for product "Linux" and version "7.0"
i386
Affected