CVE-2009-0667

2009-07-0917:30:00

[email protected]

web.nvd.nist.gov

cve-2009-0667

vulnerability

ocsinventory-agent

privilege escalation

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Untrusted search path vulnerability in Agent/Backend.pm in Ocsinventory-Agent before 0.0.9.3, and 1.x before 1.0.1, in OCS Inventory allows local users to gain privileges via a Trojan horse Perl module in an arbitrary directory.

Affected configurations

NVD

Node

ocsinventory-ngocs_inventory_ngMatch1.0

ocsinventory-ngocs_inventory_ngMatch1.0beta

ocsinventory-ngocs_inventory_ngMatch1.0rc1

ocsinventory-ngocs_inventory_ngMatch1.0rc2

ocsinventory-ngocs_inventory_ngMatch1.0rc3

ocsinventory-ngocs_inventory_ngMatch1.0rc3-1

ocsinventory-ngocsinventory-agentRange≤0.0.9.2

ocsinventory-ngocsinventory-agentMatch0.05

ocsinventory-ngocsinventory-agentMatch0.08

ocsinventory-ngocsinventory-agentMatch0.09

CPENameOperatorVersion
ocsinventory-ng:ocs_inventory_ngocsinventory-ng ocs inventory ngeq1.0
ocsinventory-ng:ocsinventory-agentocsinventory-ng ocsinventory-agentle0.0.9.2
ocsinventory-ng:ocsinventory-agentocsinventory-ng ocsinventory-agenteq0.05
ocsinventory-ng:ocsinventory-agentocsinventory-ng ocsinventory-agenteq0.08
ocsinventory-ng:ocsinventory-agentocsinventory-ng ocsinventory-agenteq0.09

CPE	Name	Operator	Version
ocsinventory-ng:ocs_inventory_ng	ocsinventory-ng ocs inventory ng	eq	1.0
ocsinventory-ng:ocsinventory-agent	ocsinventory-ng ocsinventory-agent	le	0.0.9.2
ocsinventory-ng:ocsinventory-agent	ocsinventory-ng ocsinventory-agent	eq	0.05
ocsinventory-ng:ocsinventory-agent	ocsinventory-ng ocsinventory-agent	eq	0.08
ocsinventory-ng:ocsinventory-agent	ocsinventory-ng ocsinventory-agent	eq	0.09