Lucene search

MitreCVE-2008-1132

HistoryMar 04, 2008 - 12:44 a.m.

CVE-2008-1132

2008-03-0400:44:00

CWE-264

mitre

web.nvd.nist.gov

cve-2008-1132

nvd

security vulnerability

net activity viewer

arbitrary code execution

gksu

restart as root action

CVSS2

4.7

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:N/I:C/A:N

AI Score

7.2

Confidence

High

EPSS

Percentile

11.1%

JSON

Untrusted search path vulnerability in src/mainwindow.c in Net Activity Viewer 0.2.1 allows local users with Net Activity Viewer privileges to execute arbitrary code via a malicious gksu program, which is invoked during the Restart As Root action.

Affected configurations

Nvd

Node

net_activity_viewernet_activity_viewerMatch0.2.1

VendorProductVersionCPE
net_activity_viewernet_activity_viewer0.2.1cpe:2.3:a:net_activity_viewer:net_activity_viewer:0.2.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
net_activity_viewer	net_activity_viewer	0.2.1	cpe:2.3:a:net_activity_viewer:net_activity_viewer:0.2.1:::::::*

References

secunia.com/advisories/29097

sourceforge.net/project/shownotes.php?release_id=579181

CVSS2

4.7

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:N/I:C/A:N

AI Score

7.2

Confidence

High

EPSS

Percentile

11.1%

JSON

Related for CVE-2008-1132