CVE-2006-2183 Untrusted search path vulnerability in Truecrypt 4.1, when running suid root on Linux, allows local users to execute arbitrary commands and gain privileges via a modified PATH environment variable tha...
HighCVSS 7.2
EPSS 0.59%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in Truecrypt 4.1, when running suid root on Linux, allows local users to execute arbitrary commands and gain privileges via a modified PATH environment variable that references a malicious mount command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| truecrypt foundation truecrypt | = 4.1 | No fix listed |
References
- [Dailydave] 20060430 Non disclosure from security vendors: Truecrypt exemple exploit mailing-list
- 19903 patch third-party-advisory vendor-advisory
- 25131 patch vdb-entry
- www.truecrypt.org patch
- ADV-2006-1591 vdb-entry
- truecrypt-execvp-gain-privileges(26191) vdb-entry