CVE-2001-1345: bctool in Jetico BestCrypt 0.7 and earlier trusts the user-supplied PATH to find and execute an fsck utilit...

Security readout for executives and security teams

This is a local privilege escalation flaw in Jetico BestCrypt 0.7 and earlier for Linux. A logged-in local user could influence which fsck program bctool runs by changing PATH, causing bctool to execute an attacker-controlled program with elevated privileges. Exposure is likely limited to legacy Linux systems still running Jetico BestCrypt 0.7 or earlier with local user access. Modern environments are unlikely to be affected unless old BestCrypt deployments remain unmanaged. Treat as a legacy-system cleanup issue unless affected BestCrypt installations are confirmed. Escalate if shared Linux servers still run the vulnerable version because any local account could become a higher-privileged account. Mitigation focus: Inventory Linux hosts for Jetico BestCrypt 0.7 or earlier.; Check Jetico guidance for supported upgrade or vendor remediation.; Remove or isolate unsupported affected deployments where feasible..

Prepared

Jul 1, 2026, 06:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.