Lucene search

K
mageiaGentoo FoundationMGASA-2014-0341
HistoryAug 21, 2014 - 1:36 p.m.

Updated catfish package fixes CVE-2014-2093

2014-08-2113:36:13
Gentoo Foundation
advisories.mageia.org
11

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.2%

Updated catfish package fixes security vulnerability: Untrusted search path vulnerability in Catfish allows local users to gain privileges via a Trojan horse catfish.py in the current working directory (CVE-2014-2093). Additionally, the update fixes the application icon symlink and a crash when some icons are missing from the icon theme.

OSVersionArchitecturePackageVersionFilename
Mageia3noarchcatfish< 0.3.2-6.1catfish-0.3.2-6.1.mga3

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.2%