CVE Catalog

CVE-2000-0151

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.32%

24th percentile - higher than 24% of all known CVEs

Summary

GNU make follows symlinks when reading a Makefile from stdin, allowing other local users to execute commands.

Risk Assessment

Local users may exploit this vulnerability to run unauthorized commands, potentially compromising system security.

Recommendation

It is recommended to restrict access to GNU make and monitor the use of Makefile to minimize risk.

Original NVD description (English source)

GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS