VULNERABILITY INTELLIGENCE

CVE-2009-0912

CVSS score7.2 HIGH

EPSS probability0.38%

CISA KEVNot currently listed

Published2009-03-16

Last modified2026-06-16

Description

perl-MDK-Common 1.1.11 and 1.1.24, 1.2.9 through 1.2.14, and possibly other versions, in Mandriva Linux does not properly handle strings when writing them to configuration files, which allows attackers to gain privileges via "special characters" in unspecified vectors.