CVE-2000-0151
CVSS 2.0 Score 6.2 of 10 (medium)
Details
Published Feb 1, 2000
Updated: Nov 20, 2024
Summary
CVE-2000-0151 is a vulnerability in GNU make that allows local users to execute commands by taking advantage of the software's behavior when following symlinks in Makefiles read from standard input. This issue occurs because GNU make does not properly validate the sources of input files, enabling attackers to manipulate the Makefile and introduce malicious commands. This vulnerability can lead to privilege escalation or other unintended system changes, making it a significant security risk for affected systems.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Gnu Make
Affected Vendors
- GNU