Lucene search

K
ubuntuUbuntuUSN-560-1
HistoryJan 07, 2008 - 12:00 a.m.

Tomboy vulnerability

2008-01-0700:00:00
ubuntu.com
34

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

27.5%

Releases

  • Ubuntu 7.10
  • Ubuntu 7.04
  • Ubuntu 6.10
  • Ubuntu 6.06

Packages

  • tomboy -

Details

Jan Oravec discovered that Tomboy did not properly setup the
LD_LIBRARY_PATH environment variable. A local attacker could
exploit this to execute arbitrary code as the user invoking
the program.

OSVersionArchitecturePackageVersionFilename
Ubuntu7.10noarchtomboy< 0.8.0-1ubuntu0.1UNKNOWN
Ubuntu7.04noarchtomboy< 0.6.3-0ubuntu1.1UNKNOWN
Ubuntu6.10noarchtomboy< 0.4.1-0ubuntu3.1UNKNOWN
Ubuntu6.06noarchtomboy< 0.3.5-1ubuntu3.1UNKNOWN

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

27.5%