Read the docs
TI-2001-01327 Aliases CVE-2001-1374GHSA-xp42-65qj-mvgv

expect before 5.32 searches for its libraries in /var/tmp before other directories, which…

Priority LOW 32Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gain root privileges via a Trojan horse library that is accessed by mkpasswd.

Why it matters now

EPSS 0.00371 31st percentileScored 2026-11-07
Fix Fixed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 40

CPEVersionsRoleVendor
cpe:2.3:a:don_libes:expect:0:*:*:*:*:*:*:*0VulnerableDon Libes
cpe:2.3:a:don_libes:expect:1:*:*:*:*:*:*:*1VulnerableDon Libes
cpe:2.3:a:don_libes:expect:2:*:*:*:*:*:*:*2VulnerableDon Libes
cpe:2.3:a:don_libes:expect:3:*:*:*:*:*:*:*3VulnerableDon Libes
cpe:2.3:a:don_libes:expect:4:*:*:*:*:*:*:*4VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.0:*:*:*:*:*:*:*5.0VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.1:*:*:*:*:*:*:*5.1VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.2:*:*:*:*:*:*:*5.2VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.3:*:*:*:*:*:*:*5.3VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.4:*:*:*:*:*:*:*5.4VulnerableDon Libes
  • cpe:2.3:a:don_libes:expect:0:*:*:*:*:*:*:* Versions 0 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:1:*:*:*:*:*:*:* Versions 1 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:2:*:*:*:*:*:*:* Versions 2 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:3:*:*:*:*:*:*:* Versions 3 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:4:*:*:*:*:*:*:* Versions 4 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.1:*:*:*:*:*:*:* Versions 5.1 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.2:*:*:*:*:*:*:* Versions 5.2 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.3:*:*:*:*:*:*:* Versions 5.3 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.4:*:*:*:*:*:*:* Versions 5.4 Vulnerable ·Don Libes
Show 30 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:don_libes:expect:5.5:*:*:*:*:*:*:*5.5VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.6:*:*:*:*:*:*:*5.6VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.7:*:*:*:*:*:*:*5.7VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.8:*:*:*:*:*:*:*5.8VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.9:*:*:*:*:*:*:*5.9VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.10:*:*:*:*:*:*:*5.10VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.11:*:*:*:*:*:*:*5.11VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.12:*:*:*:*:*:*:*5.12VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.13:*:*:*:*:*:*:*5.13VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.14:*:*:*:*:*:*:*5.14VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.15:*:*:*:*:*:*:*5.15VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.16:*:*:*:*:*:*:*5.16VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.17:*:*:*:*:*:*:*5.17VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.18:*:*:*:*:*:*:*5.18VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.19:*:*:*:*:*:*:*5.19VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.20:*:*:*:*:*:*:*5.20VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.21:*:*:*:*:*:*:*5.21VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.22:*:*:*:*:*:*:*5.22VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.23:*:*:*:*:*:*:*5.23VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.24:*:*:*:*:*:*:*5.24VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.25:*:*:*:*:*:*:*5.25VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.26:*:*:*:*:*:*:*5.26VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.27:*:*:*:*:*:*:*5.27VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.28:*:*:*:*:*:*:*5.28VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.29:*:*:*:*:*:*:*5.29VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.30:*:*:*:*:*:*:*5.30VulnerableDon Libes
cpe:2.3:a:don_libes:expect:5.31:*:*:*:*:*:*:*5.31VulnerableDon Libes
cpe:2.3:o:conectiva:linux:6.0:*:*:*:*:*:*:*6.0VulnerableConectiva
cpe:2.3:o:conectiva:linux:7.0:*:*:*:*:*:*:*7.0VulnerableConectiva
cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
  • cpe:2.3:a:don_libes:expect:5.5:*:*:*:*:*:*:* Versions 5.5 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.6:*:*:*:*:*:*:* Versions 5.6 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.7:*:*:*:*:*:*:* Versions 5.7 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.8:*:*:*:*:*:*:* Versions 5.8 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.9:*:*:*:*:*:*:* Versions 5.9 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.10:*:*:*:*:*:*:* Versions 5.10 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.11:*:*:*:*:*:*:* Versions 5.11 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.12:*:*:*:*:*:*:* Versions 5.12 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.13:*:*:*:*:*:*:* Versions 5.13 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.14:*:*:*:*:*:*:* Versions 5.14 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.15:*:*:*:*:*:*:* Versions 5.15 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.16:*:*:*:*:*:*:* Versions 5.16 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.17:*:*:*:*:*:*:* Versions 5.17 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.18:*:*:*:*:*:*:* Versions 5.18 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.19:*:*:*:*:*:*:* Versions 5.19 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.20:*:*:*:*:*:*:* Versions 5.20 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.21:*:*:*:*:*:*:* Versions 5.21 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.22:*:*:*:*:*:*:* Versions 5.22 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.23:*:*:*:*:*:*:* Versions 5.23 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.24:*:*:*:*:*:*:* Versions 5.24 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.25:*:*:*:*:*:*:* Versions 5.25 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.26:*:*:*:*:*:*:* Versions 5.26 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.27:*:*:*:*:*:*:* Versions 5.27 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.28:*:*:*:*:*:*:* Versions 5.28 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.29:*:*:*:*:*:*:* Versions 5.29 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.30:*:*:*:*:*:*:* Versions 5.30 Vulnerable ·Don Libes
  • cpe:2.3:a:don_libes:expect:5.31:*:*:*:*:*:*:* Versions 5.31 Vulnerable ·Don Libes
  • cpe:2.3:o:conectiva:linux:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Conectiva
  • cpe:2.3:o:conectiva:linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Conectiva
  • cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Linux 7.0Fixed RHSA-2002:148
Red Hat Linux 7.1Fixed RHSA-2002:148

Timeline

  1. 2026-10-02 Threatist record created from CVE-2001-1374
  2. 2026-10-03 Alias added: GHSA-xp42-65qj-mvgv

References

Advisory 3

Other 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences