Lucene search

[email protected]NVD:CVE-2013-1874

HistorySep 29, 2014 - 10:55 p.m.

CVE-2013-1874

2014-09-2922:55:05

[email protected]

web.nvd.nist.gov

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

High

EPSS

Percentile

5.1%

JSON

Untrusted search path vulnerability in csi in Chicken before 4.8.2 allows local users to execute arbitrary code via a Trojan horse .csirc in the current working directory.

Affected configurations

Nvd

Node

call-ccchickenRange≤4.8.1

call-ccchickenMatch4.8.0

call-ccchickenMatch4.8.0rc1

call-ccchickenMatch4.8.0rc2

call-ccchickenMatch4.8.0rc3

call-ccchickenMatch4.8.0rc4

call-ccchickenMatch4.8.0.1

call-ccchickenMatch4.8.0.2

call-ccchickenMatch4.8.0.3

call-ccchickenMatch4.8.0.4

call-ccchickenMatch4.8.0.5

call-ccchickenMatch4.8.0.6

call-ccchickenMatch4.8.0.7

VendorProductVersionCPE
call-ccchicken*cpe:2.3:a:call-cc:chicken:*:*:*:*:*:*:*:*
call-ccchicken4.8.0cpe:2.3:a:call-cc:chicken:4.8.0:*:*:*:*:*:*:*
call-ccchicken4.8.0cpe:2.3:a:call-cc:chicken:4.8.0:rc1:*:*:*:*:*:*
call-ccchicken4.8.0cpe:2.3:a:call-cc:chicken:4.8.0:rc2:*:*:*:*:*:*
call-ccchicken4.8.0cpe:2.3:a:call-cc:chicken:4.8.0:rc3:*:*:*:*:*:*
call-ccchicken4.8.0cpe:2.3:a:call-cc:chicken:4.8.0:rc4:*:*:*:*:*:*
call-ccchicken4.8.0.1cpe:2.3:a:call-cc:chicken:4.8.0.1:*:*:*:*:*:*:*
call-ccchicken4.8.0.2cpe:2.3:a:call-cc:chicken:4.8.0.2:*:*:*:*:*:*:*
call-ccchicken4.8.0.3cpe:2.3:a:call-cc:chicken:4.8.0.3:*:*:*:*:*:*:*
call-ccchicken4.8.0.4cpe:2.3:a:call-cc:chicken:4.8.0.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
call-cc	chicken	*	cpe:2.3:a:call-cc:chicken::::::::
call-cc	chicken	4.8.0	cpe:2.3:a:call-cc:chicken:4.8.0:::::::*
call-cc	chicken	4.8.0	cpe:2.3:a:call-cc:chicken:4.8.0:rc1::::::
call-cc	chicken	4.8.0	cpe:2.3:a:call-cc:chicken:4.8.0:rc2::::::
call-cc	chicken	4.8.0	cpe:2.3:a:call-cc:chicken:4.8.0:rc3::::::
call-cc	chicken	4.8.0	cpe:2.3:a:call-cc:chicken:4.8.0:rc4::::::
call-cc	chicken	4.8.0.1	cpe:2.3:a:call-cc:chicken:4.8.0.1:::::::*
call-cc	chicken	4.8.0.2	cpe:2.3:a:call-cc:chicken:4.8.0.2:::::::*
call-cc	chicken	4.8.0.3	cpe:2.3:a:call-cc:chicken:4.8.0.3:::::::*
call-cc	chicken	4.8.0.4	cpe:2.3:a:call-cc:chicken:4.8.0.4:::::::*

Rows per page:

1-10 of 131

References

code.call-cc.org/cgi-bin/gitweb.cgi?p=chicken-core.git%3Ba=blob%3Bf=NEWS%3Bh=c21c7cf9d1faf4f78736890ac7ca1d4b82d72ddd%3Bhb=c6750af99ada7fa4815ee834e4e705bcfac9c137

seclists.org/oss-sec/2013/q1/692

www.osvdb.org/91520

www.securityfocus.com/bid/58583

exchange.xforce.ibmcloud.com/vulnerabilities/85065