Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gain root privileges via a Trojan horse library that is accessed by mkpasswd.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
TCL/TK expect不安全的库搜索路径漏洞
Vulnerability Description
Tcl是一种流行的命令编程语言，可以很方便地利用它来向一些交互程序发布命令。它还包括一个库软件包，里面包括Tcl语言解释器、实现内置Tcl命令的例程、以及一些扩展功能。TK是Tcl的一个扩展，用来为程序员提供一个与X11 Windows系统的编程接口。一些Linux系统带的Tcl/Tk开发环境中含有一些应用程序：tcl、tk、tix、tclX、expect和itcl。 Tcl/tk软件包中所带的expect应用程序5.32之前版本在搜索自己的库文件时采用了不安全的搜索路径，可能允许本地用户提升权限。 ex
CVSS Information
N/A
Vulnerability Type
N/A