CVE-2013-1874

2014-09-2922:55:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2013-1874

untrusted search path vulnerability

chicken

code execution

trojan horse

nvd

7.2 High

AI Score

Confidence

High

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.2%

JSON

Untrusted search path vulnerability in csi in Chicken before 4.8.2 allows local users to execute arbitrary code via a Trojan horse .csirc in the current working directory.

CPENameOperatorVersion
call-cc:chickencall-cc chickeneq4.8.0.1
call-cc:chickencall-cc chickeneq4.8.0.2
call-cc:chickencall-cc chickeneq4.8.0.3
call-cc:chickencall-cc chickeneq4.8.0.6
call-cc:chickencall-cc chickeneq4.8.0
call-cc:chickencall-cc chickeneq4.8.0.4
call-cc:chickencall-cc chickeneq4.8.0.7
call-cc:chickencall-cc chickenle4.8.1
call-cc:chickencall-cc chickeneq4.8.0.5

CPE	Name	Operator	Version
call-cc:chicken	call-cc chicken	eq	4.8.0.1
call-cc:chicken	call-cc chicken	eq	4.8.0.2
call-cc:chicken	call-cc chicken	eq	4.8.0.3
call-cc:chicken	call-cc chicken	eq	4.8.0.6
call-cc:chicken	call-cc chicken	eq	4.8.0
call-cc:chicken	call-cc chicken	eq	4.8.0.4
call-cc:chicken	call-cc chicken	eq	4.8.0.7
call-cc:chicken	call-cc chicken	le	4.8.1
call-cc:chicken	call-cc chicken	eq	4.8.0.5

References

code.call-cc.org/cgi-bin/gitweb.cgi?p=chicken-core.git%3Ba=blob%3Bf=NEWS%3Bh=c21c7cf9d1faf4f78736890ac7ca1d4b82d72ddd%3Bhb=c6750af99ada7fa4815ee834e4e705bcfac9c137

seclists.org/oss-sec/2013/q1/692

www.osvdb.org/91520

www.securityfocus.com/bid/58583

exchange.xforce.ibmcloud.com/vulnerabilities/85065