Design/Logic Flaw

Untrusted search path vulnerability in Catfish 0.6.0 through 1.0.0 allows local users to gain privileges via a Trojan horse bin/catfish.py under the current working directory...

CVE-2014-2095

CVE-2014-2095 affects Catfish 0.6.0–1.0.0. The class of vulnerability is an untrusted search path that enables local privilege escalation when a Trojan horse bin/catfish.pyc in the current working directory is executed, if the Fedora package (e.g., 0.8.2-1) is not used. Multiple sources (NVD/NIDS...