VULNERABILITY INTELLIGENCE

CVE-2009-1601

CVSS score6.8 MEDIUM
EPSS probability0.32%
CISA KEVNot currently listed
Published2009-05-11
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:S/C:C/I:C/A:C

Description

The Ubuntu clamav-milter.init script in clamav-milter before 0.95.1+dfsg-1ubuntu1.2 in Ubuntu 9.04 sets the ownership of the current working directory to the clamav account, which might allow local users to bypass intended access restrictions via read or write operations involving this directory.

Primary references