CVE-2009-0912

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-03-16 · updated 2026-06-16
Weakness: CWE-20

Description

perl-MDK-Common 1.1.11 and 1.1.24, 1.2.9 through 1.2.14, and possibly other versions, in Mandriva Linux does not properly handle strings when writing them to configuration files, which allows attackers to gain privileges via "special characters" in unspecified vectors.

Affected products

Mandriva Linux: 2008.0, 2008.1, 2009.0
Mandriva Linux Corporate Server: 3.0, 4.0
Mandriva Multi Network Firewall: 2.0

References

http://www.mandriva.com/security/advisories?name=MDVSA-2009:072
http://www.securityfocus.com/bid/34089
http://www.vupen.com/english/advisories/2009/0688
https://exchange.xforce.ibmcloud.com/vulnerabilities/49220
http://www.mandriva.com/security/advisories?name=MDVSA-2009:072
http://www.securityfocus.com/bid/34089
http://www.vupen.com/english/advisories/2009/0688
https://exchange.xforce.ibmcloud.com/vulnerabilities/49220

Get alerted when CVE-2009-0912 or the next vulnerability affects your stack