CVE-2005-4790

2005-12-3100:00:00

ubuntu.com

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

26.8%

JSON

Multiple untrusted search path vulnerabilities in SUSE Linux 9.3 and 10.0,
and possibly other distributions, cause the working directory to be added
to LD_LIBRARY_PATH, which might allow local users to execute arbitrary code
via (1) beagle, (2) tomboy, or (3) blam. NOTE: in August 2007, the tomboy
vector was reported for other distributions.

Bugs

<https://bugs.launchpad.net/ubuntu/+source/tomboy/+bug/162520>

Notes

Author	Note
jdstrand	bug has debdiffs upstream 0.9.1 does not contain the vulnerable code

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchtomboy< 0.3.5-1ubuntu3.1UNKNOWN
ubuntu6.10noarchtomboy< 0.4.1-0ubuntu3.1UNKNOWN
ubuntu7.04noarchtomboy< 0.6.3-0ubuntu1.1UNKNOWN
ubuntu7.10noarchtomboy< 0.8.0-1ubuntu0.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	tomboy	< 0.3.5-1ubuntu3.1	UNKNOWN
ubuntu	6.10	noarch	tomboy	< 0.4.1-0ubuntu3.1	UNKNOWN
ubuntu	7.04	noarch	tomboy	< 0.6.3-0ubuntu1.1	UNKNOWN
ubuntu	7.10	noarch	tomboy	< 0.8.0-1ubuntu0.1	UNKNOWN