CVE-2009-3894

Multiple untrusted search path vulnerabilities in dstat before 0.7.0 allow
local users to gain privileges via a Trojan horse Python module in (1) the
current working directory or (2) a certain subdirectory of the current
working directory.

Bugs

• <https://bugzilla.redhat.com/show_bug.cgi?id=538459&gt;
• <http://bugs.gentoo.org/show_bug.cgi?id=293497&gt;
• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=557989&gt;