CVE-2009-0912: Mandriva Linux

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

perl-MDK-Common 1.1.11 and 1.1.24, 1.2.9 through 1.2.14, and possibly other versions, in Mandriva Linux does not properly handle strings when writing them to configuration files, which allows attackers to gain privileges via "special characters" in unspecified vectors.

Affected products

• Mandriva Linux: version 2008.0 only; version 2008.1 only; version 2009.0 only
• Mandriva Linux Corporate Server: version 3.0 only; version 4.0 only
• Mandriva Multi Network Firewall: version 2.0 only

Published 2009-03-16. Last modified 2026-06-16.