CVE-2001-0170: Conectiva Linux

Low severity, CVSS 2.1. EPSS: 0.8% chance of exploitation in the next 30 days.

glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing setuid/setgid programs, which could allow local users to read arbitrary files.

Affected products

• Conectiva Linux: version 4.0 only; version 4.0es only; version 4.1 only; version 4.2 only; version 5.0 only; version 5.1 only; …
• Debian Debian Linux: version 2.3 only
• Immunix Immunix: version 7.0_beta only
• Red Hat Linux: version 7.0 only

Published 2001-03-26. Last modified 2026-06-16.