252 matches found
catfish code execution
catfish.py in current path is executed...
Mandriva Linux Security Advisory : catfish (MDVSA-2014:162)
Updated catfish package fixes security vulnerability : Untrusted search path vulnerability in Catfish allows local users to gain privileges via a Trojan horse catfish.py in the current working directory CVE-2014-2093. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
MGASA-2014-0342 Updated catfish package fixes CVE-2014-2096
Updated catfish package fixes security vulnerabilities: Untrusted search path vulnerability in Catfish allows local users to gain privileges via a Trojan horse bin/catfish.py in the current working directory CVE-2014-2096. Additionally, the update adds a missing requirement for the...
Updated catfish package fixes CVE-2014-2096
Updated catfish package fixes security vulnerabilities: Untrusted search path vulnerability in Catfish allows local users to gain privileges via a Trojan horse bin/catfish.py in the current working directory CVE-2014-2096. Additionally, the update adds a missing requirement for the...
MGASA-2014-0341 Updated catfish package fixes CVE-2014-2093
Updated catfish package fixes security vulnerability: Untrusted search path vulnerability in Catfish allows local users to gain privileges via a Trojan horse catfish.py in the current working directory CVE-2014-2093. Additionally, the update fixes the application icon symlink and a crash when som...
Updated catfish package fixes CVE-2014-2093
Updated catfish package fixes security vulnerability: Untrusted search path vulnerability in Catfish allows local users to gain privileges via a Trojan horse catfish.py in the current working directory CVE-2014-2093. Additionally, the update fixes the application icon symlink and a crash when som...
GLSA-201408-04 : Catfish: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201408-04 Catfish: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Catfish. Please review the CVE identifiers referenced below for details. Impact : A local attacker could gain escalated privileges via a...
Catfish: Multiple Vulnerabilities
Background Catfish is a versatile file searching tool. Description Multiple vulnerabilities have been discovered in Catfish. Please review the CVE identifiers referenced below for details. Impact A local attacker could gain escalated privileges via a specially crafted shared library. Workaround...
Fedora Update for catfish FEDORA-2014-3453
Check for the Version of catfish OpenVAS Vulnerability Test Fedora Update for catfish FEDORA-2014-3453 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for catfish FEDORA-2014-3497
Check for the Version of catfish OpenVAS Vulnerability Test Fedora Update for catfish FEDORA-2014-3497 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for catfish FEDORA-2014-3497
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 20 : catfish-1.0.1-1.fc20 (2014-3497)
In the previous rpm, catfish used a wrapper launching script using some bad logic for searching paths, which might lead to arbitrary code execution exploit by malicious local user. This vulnerability is now assigned as CVE-2014-2093 through CVE-2014-2096. This new rpm should fix this issue. Note...
Fedora 19 : catfish-0.4.0.2-4.fc19 (2014-3453)
In the previous rpm, catfish used a wrapper launching script using some bad logic for searching paths, which might lead to arbitrary code execution exploit by malicious local user. This vulnerability is now assigned as CVE-2014-2093 through CVE-2014-2096. This new rpm should fix this issue. Note...
Fedora Update for catfish FEDORA-2014-3453
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 20 Update: catfish-1.0.1-1.fc20
Catfish is a handy file searching tool. The interface is intentionally lightweight and simple, using only GTK+3. You can configure it to your needs by using several command line options...
DEBIAN-CVE-2014-2096
Untrusted search path vulnerability in Catfish 0.6.0 through 1.0.0 allows local users to gain privileges via a Trojan horse bin/catfish.py under the current working directory...
CVE-2014-2094
Untrusted search path vulnerability in Catfish through 0.4.0.3, when a Fedora package such as 0.4.0.2-2 is not used, allows local users to gain privileges via a Trojan horse catfish.pyc in the current working directory...
CVE-2014-2093
Untrusted search path vulnerability in Catfish through 0.4.0.3 allows local users to gain privileges via a Trojan horse catfish.py in the current working directory...