Lucene search
HistoryMar 11, 2009 - 2:19 p.m.
CVE-2009-0854
cve-2009-0854
untrusted search path
dash 0.5.4
login shell
local users
arbitrary code
trojan horse
.profile
6.9 Medium
AI Score
Confidence
High
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.4%
Untrusted search path vulnerability in dash 0.5.4, when used as a login shell, allows local users to execute arbitrary code via a Trojan horse .profile file in the current working directory.
Related
openvas
openvas
Ubuntu: Security Advisory (USN-732-1)
2009-03-13 00:00:00
Ubuntu USN-732-1 (dash)
2009-03-13 00:00:00
Ubuntu USN-731-1 (apache2)
2009-03-13 00:00:00
nessus
nessus
Ubuntu 8.04 LTS / 8.10 : dash vulnerability (USN-732-1)
2009-04-23 00:00:00
debiancve
debiancve
CVE-2009-0854
2009-03-11 14:19:00
ubuntu
ubuntu
dash vulnerability
2009-03-10 00:00:00
prion
prion
Design/Logic Flaw
2009-03-11 14:19:00
securityvulns
securityvulns
dash privilege esclation
2009-03-12 00:00:00
[USN-732-1] dash vulnerability
2009-03-12 00:00:00
ubuntucve
ubuntucve
CVE-2009-0854
2009-03-11 00:00:00
6.9 Medium
AI Score
Confidence
High
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.4%
Related for CVE-2009-0854