Lucene search

K
nvd[email protected]NVD:CVE-2009-0667
HistoryJul 09, 2009 - 5:30 p.m.

CVE-2009-0667

2009-07-0917:30:00
web.nvd.nist.gov

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Untrusted search path vulnerability in Agent/Backend.pm in Ocsinventory-Agent before 0.0.9.3, and 1.x before 1.0.1, in OCS Inventory allows local users to gain privileges via a Trojan horse Perl module in an arbitrary directory.

Affected configurations

NVD
Node
ocsinventory-ngocs_inventory_ngMatch1.0
OR
ocsinventory-ngocs_inventory_ngMatch1.0beta
OR
ocsinventory-ngocs_inventory_ngMatch1.0rc1
OR
ocsinventory-ngocs_inventory_ngMatch1.0rc2
OR
ocsinventory-ngocs_inventory_ngMatch1.0rc3
OR
ocsinventory-ngocs_inventory_ngMatch1.0rc3-1
OR
ocsinventory-ngocsinventory-agentRange0.0.9.2
OR
ocsinventory-ngocsinventory-agentMatch0.05
OR
ocsinventory-ngocsinventory-agentMatch0.08
OR
ocsinventory-ngocsinventory-agentMatch0.09

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%