CVE-2001-1375: Conectiva Linux

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

tcl/tk package (tcltk) 8.3.1 searches for its libraries in the current working directory before other directories, which could allow local users to execute arbitrary code via a Trojan horse library that is under a user-controlled directory.

Affected products

  • Conectiva Linux: version 6.0 only; version 7.0 only
  • Red Hat Linux: version 7.0 only

Published 2001-07-19. Last modified 2026-06-16.