CVE:CVE-2009-0912
CNNVD:CNNVD-200903-276
Mandriva Linux的perl-MDK-Common 1.1.11版本和1.1.24版本,1.2.9版本至1.2.14版本,以及其它版本没有适当地处理字符串，当把他们写入配置文件中时,攻击者可以借助未知向量中的"特殊字符"，获得特权。
solution:Upgrade mandriva multi_network_firewall to a higher version than 2.0,and avoid the version 2.0; Upgrade mandriva linux to a higher version than 2008.0,2008.1,2009.0,and avoid the version 2008.0,2008.1,2009.0; Upgrade mandriva linux_corporate_server to a higher version than 3.0,4.0,and avoid the version 3.0,4.0