Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2005-4790
HistoryDec 31, 2005 - 5:00 a.m.

CVE-2005-4790

2005-12-3105:00:00
Debian Security Bug Tracker
security-tracker.debian.org
4

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

Multiple untrusted search path vulnerabilities in SUSE Linux 9.3 and 10.0, and possibly other distributions, cause the working directory to be added to LD_LIBRARY_PATH, which might allow local users to execute arbitrary code via (1) beagle, (2) tomboy, or (3) blam. NOTE: in August 2007, the tomboy vector was reported for other distributions.

OSVersionArchitecturePackageVersionFilename
Debian9alltomboy< 1.14.1-4tomboy_1.14.1-4_all.deb

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C