Vulnerability Description
Format string vulnerability in Berkeley parallel make (pmake) 2.1.33 and earlier allows a local user to gain root privileges via format specifiers in the check argument of a shell definition.
CVSS Score
7.2
HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Berkeley | Pmake | <= 2.1.33 |
References
- http://marc.info/?l=bugtraq&m=100638919720975&w=2
- http://www.iss.net/security_center/static/7602.php
- http://www.securityfocus.com/bid/3572
- http://marc.info/?l=bugtraq&m=100638919720975&w=2
- http://www.iss.net/security_center/static/7602.php
- http://www.securityfocus.com/bid/3572
FAQ
What is CVE-2001-0915?
CVE-2001-0915 is a vulnerability with a CVSS score of 7.2 (HIGH). Format string vulnerability in Berkeley parallel make (pmake) 2.1.33 and earlier allows a local user to gain root privileges via format specifiers in the check argument of a shell definition.
How severe is CVE-2001-0915?
CVE-2001-0915 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2001-0915?
Check the references section above for vendor advisories and patch information. Affected products include: Berkeley Pmake.