CVE-2009-1601

CVSS 6.8 - MEDIUM

Description

The Ubuntu clamav-milter.init script in clamav-milter before 0.95.1+dfsg-1ubuntu1.2 in Ubuntu 9.04 sets the ownership of the current working directory to the clamav account, which might allow local users to bypass intended access restrictions via read or write operations involving this directory.

Affected Products

1

Vendor	Product	Version
ubuntu	linux	`9.04`

References

http://secunia.com/advisories/35000

http://www.securityfocus.com/bid/34818

http://www.ubuntu.com/usn/USN-770-1

https://exchange.xforce.ibmcloud.com/vulnerabiliti...

https://launchpad.net/bugs/365823

http://secunia.com/advisories/35000

http://www.securityfocus.com/bid/34818

http://www.ubuntu.com/usn/USN-770-1

https://exchange.xforce.ibmcloud.com/vulnerabiliti...

https://launchpad.net/bugs/365823

Weakness Types

CWE-264

CVE Information

CVE ID:: CVE-2009-1601
Published:: 2009-05-11
Modified:: 2026-04-23
CVSS Score:: 6.8
Severity:: MEDIUM
Vector:: AV:L/AC:L/Au:S/C:C/I:C/A:C

Affected Vendors

ubuntu

Quick Actions

View on NVD Find Similar CVEs

CVSS Severity Scale

0.0 - 3.9 LOW

4.0 - 6.9 MEDIUM

7.0 - 8.9 HIGH

9.0 - 10.0 CRITICAL