CVE-2001-1345 bctool in Jetico BestCrypt 0.7 and earlier trusts the user-supplied PATH to find and execute an fsck utility program, which allows local users to gain privileges by modifying the PATH to point to a Tr...
MediumCVSS 4.6
EPSS 0.50%
- Published
- Updated
- Exploit status
- No public exploit known
Description
bctool in Jetico BestCrypt 0.7 and earlier trusts the user-supplied PATH to find and execute an fsck utility program, which allows local users to gain privileges by modifying the PATH to point to a Trojan horse program.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jetico bestcrypt | <= 0.7 | No fix listed |
References
- 20010604 Fatal flaw in BestCrypt <= v0.7 (Linux) mailing-list
- www.jetico.com
- 2820 exploit patch vdb-entry vendor-advisory
- bestcrypt-bctool-gain-privileges(6648) vdb-entry