Lucene search

K
cve[email protected]CVE-2007-6167
HistoryNov 29, 2007 - 1:46 a.m.

CVE-2007-6167

2007-11-2901:46:00
CWE-264
web.nvd.nist.gov
25
cve-2007-6167
untrusted search path
vulnerability
yast2-core
suse linux
local users
arbitrary code

7.3 High

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

Untrusted search path vulnerability in yast2-core in SUSE Linux might allow local users to execute arbitrary code by creating a malicious yast2 module in the current working directory.

CPENameOperatorVersion
suse:suse_linuxsuse suse linuxeq*

7.3 High

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

Related for CVE-2007-6167