Don Libes Expect — known CVE vulnerabilities

Every CVE whose affected-product data names Don Libes Expect, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2001-1467 — CVSS 7.5 (high): mkpasswd in expect 5.2.8, as used by Red Hat Linux 6.2 through 7.0, seeds its random number generator with its process ID, which limits the…
• CVE-2001-1374 — CVSS 7.2 (high): expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gain root privileges…