Lucene search

K
mageiaGentoo FoundationMGASA-2014-0342
HistoryAug 21, 2014 - 1:36 p.m.

Updated catfish package fixes CVE-2014-2096

2014-08-2113:36:13
Gentoo Foundation
advisories.mageia.org
11

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

0

Percentile

5.1%

Updated catfish package fixes security vulnerabilities: Untrusted search path vulnerability in Catfish allows local users to gain privileges via a Trojan horse bin/catfish.py in the current working directory (CVE-2014-2096). Additionally, the update adds a missing requirement for the gnome-icon-theme-symbolic package.

OSVersionArchitecturePackageVersionFilename
Mageia4noarchcatfish< 0.8.2-2.1catfish-0.8.2-2.1.mga4

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

0

Percentile

5.1%