Command injection

🗓️ 22 Apr 2019 16:29:00Reported by PRIOn knowledge baseType

Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Apport before 2.19.2 function _python_module_pat

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2015-1341	22 Apr 201920:30	–	circl
CVE	CVE-2015-1341	22 Apr 201915:35	–	cve
Cvelist	CVE-2015-1341 Apport privilege escalation through Python module imports	22 Apr 201915:35	–	cvelist
EUVD	EUVD-2015-1480	7 Oct 202500:30	–	euvd
NVD	CVE-2015-1341	22 Apr 201916:29	–	nvd
OpenVAS	Ubuntu: Security Advisory (USN-2782-1)	28 Oct 201500:00	–	openvas
OSV	UBUNTU-CVE-2015-1341	27 Oct 201500:00	–	osv
OSV	USN-2782-1 apport vulnerability	27 Oct 201512:36	–	osv
securityvulns	[USN-2782-1] Apport vulnerability	2 Nov 201500:00	–	securityvulns
SUSE CVE	SUSE CVE-2015-1341	15 Feb 202305:21	–	susecve