high7.2
CVE-2006-2183
Untrusted search path vulnerability in Truecrypt 4.1, when running suid root on Linux, allows local users to execute arbitrary commands and gain privileges via…
Impact
Untrusted search path vulnerability in Truecrypt 4.1, when running suid root on Linux, allows local users to execute arbitrary commands and gain privileges via a modified PATH environment variable that references a malicious mount command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Truecrypt Foundation | Truecrypt | Version 4.1 |
References
- NVD record
- CVE.org record
- http://lists.immunitysec.com/pipermail/dailydave/2006-April/003152.html
- http://secunia.com/advisories/19903
- http://www.osvdb.org/25131
- http://www.truecrypt.org/history.php
- http://www.vupen.com/english/advisories/2006/1591
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26191
- http://lists.immunitysec.com/pipermail/dailydave/2006-April/003152.html
- http://secunia.com/advisories/19903
- http://www.osvdb.org/25131
- http://www.truecrypt.org/history.php
- http://www.vupen.com/english/advisories/2006/1591
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26191