CVE-2001-0170

glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or...

2.1 LowPublic exploit

glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing setuid/setgid programs, which could allow local users to read arbitrary files.

Exploit likelihood

0.84%Down 0.9 points since Feb 4, 2022

What each source reports

NVD Score used 2.1

Record: CVE-2001-0170
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Updated: 2026-11-02

CVE List No score

Record: CVE-2001-0170
Updated: 2026-11-02

EUVDEUVD-2001-0170 No score

Record: EUVD-2001-0170
Updated: 2026-11-03

GitHub AdvisoriesGHSA-6558-8g43-2f27 No score

glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or...

Record: GHSA-6558-8g43-2f27
Updated: 2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	glibc-2.2 / openssh-2.3.0p1 / glibc 2.1.9x - File Read	2001-01-25
Exploit-DB	Resolv+ 'RESOLV_HOST_CONF' - Linux Library Command Execution	1996-01-01

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2001-0170 is a low vulnerability (CVSS 2.1) in Conectiva Linux, published March 26, 2001. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.84%, the 58th percentile. No source names a fixed version.