CVE-2008-5985

Untrusted search path vulnerability in the Python interface in Epiphany 2.22.3, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySysSetArgv function CVE-2008-5983...

CVE-2008-5986

Technical details for CVE-2008-5986 are not publicly provided in the supplied documents. The initial entry mentions an untrusted search path vulnerability in Csound components, but no vendor/version specifics or fixes are included here. Monitor for updates.

CVE-2008-5987

The CVE-2008-5987 entry concerns Eye of GNOME (eog) up to at least version 2.22.3, with a vulnerability in the Python interface. The issue arises from an untrusted search path: a Trojan horse Python file in the current working directory can be executed, due to the PySys_SetArgv function. This loc...

CVE-2009-0316

Untrusted search path vulnerability in src/ifpython.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySysSetArgv function CVE-2008-5983, as demonstrated ...

CVE-2009-0314

Untrusted search path vulnerability in the Python module in gedit allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySysSetArgv function CVE-2008-5983...

CVE-2009-0316

CVE-2009-0316 describes an untrusted search path vulnerability in Vim’s Python interface (src/if_python.c). Vim versions before 7.2.045 are affected. The PySys_SetArgv API behavior prepends an empty string to sys.path when argv[0] lacks a path separator, enabling local users to execute arbitrary ...

CVE-2009-0316

Untrusted search path vulnerability in src/ifpython.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySysSetArgv function CVE-2008-5983, as demonstrated ...

CVE-2009-0315

Removed by vendor...

Design/Logic Flaw

Untrusted search path vulnerability in the PySysSetArgv API function in Python 2.6 and earlier, and possibly later versions, prepends an empty string to sys.path when the argv0 argument does not contain a path separator, which might allow local users to execute arbitrary code via a Trojan horse...

CVE-2008-5983

Untrusted search path vulnerability in the PySysSetArgv API function in Python 2.6 and earlier, and possibly later versions, prepends an empty string to sys.path when the argv0 argument does not contain a path separator, which might allow local users to execute arbitrary code via a Trojan horse...

CVE-2008-5983

The CVE-2008-5983 vulnerability pertains to the PySys_SetArgv handling in Python up to version 2.6 and earlier, where argv[0] lacking a path separator causes an empty string to be prepended to sys.path, potentially enabling local users to execute arbitrary code via a Trojan Python file in the CWD...

CVE-2008-5983

Untrusted search path vulnerability in the PySysSetArgv API function in Python 2.6 and earlier, and possibly later versions, prepends an empty string to sys.path when the argv0 argument does not contain a path separator, which might allow local users to execute arbitrary code via a Trojan horse...

CVE-2008-5983

Untrusted search path vulnerability in the PySysSetArgv API function in Python 2.6 and earlier, and possibly later versions, prepends an empty string to sys.path when the argv0 argument does not contain a path separator, which might allow local users to execute arbitrary code via a Trojan horse...

epiphany -- untrusted search path vulnerability

CVE Mitre reports: Untrusted search path vulnerability in the Python interface in Epiphany 2.22.3, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySysSetArgv function...

CVE-2008-5843

Multiple untrusted search path vulnerabilities in pdfjam allow local users to gain privileges via a Trojan horse program in 1 the current working directory or 2 /var/tmp, related to the a pdf90, b pdfjoin, and c pdfnup scripts...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in pdfjam allow local users to gain privileges via a Trojan horse program in 1 the current working directory or 2 /var/tmp, related to the a pdf90, b pdfjoin, and c pdfnup scripts...

CVE-2008-5843

CVE-2008-5843 relates to multiple untrusted search path vulnerabilities in the pdfjam suite (pdf90, pdfjoin, pdfnup). The root cause is insecure path handling that allows a local user to place a Trojan horse in the current working directory or /var/tmp, enabling privilege escalation. Affected com...

CVE-2008-5843

Multiple untrusted search path vulnerabilities in pdfjam allow local users to gain privileges via a Trojan horse program in 1 the current working directory or 2 /var/tmp, related to the a pdf90, b pdfjoin, and c pdfnup scripts...

CVE-2008-2378

Untrusted search path vulnerability in hfkernel in hf 0.7.3 and 0.8 allows local users to gain privileges via a Trojan horse killall program in a directory in the PATH, related to improper handling of the -k option...

Design/Logic Flaw

Untrusted search path vulnerability in hfkernel in hf 0.7.3 and 0.8 allows local users to gain privileges via a Trojan horse killall program in a directory in the PATH, related to improper handling of the -k option...