medium4.6
CVE-2001-1272
wmtv 0.6.5 and earlier does not properly drop privileges, which allows local users to execute arbitrary commands via the -e (external command) option.
Impact
wmtv 0.6.5 and earlier does not properly drop privileges, which allows local users to execute arbitrary commands via the -e (external command) option.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wliang | Wmtv | through 0.6.5 |