CVE-2005-4790 Multiple untrusted search path vulnerabilities in SUSE Linux 9.3 and 10.0, and possibly other distributions, cause the working directory to be added to LD_LIBRARY_PATH, which might allow local users t...
MediumCVSS 6.9
EPSS 0.49%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple untrusted search path vulnerabilities in SUSE Linux 9.3 and 10.0, and possibly other distributions, cause the working directory to be added to LD_LIBRARY_PATH, which might allow local users to execute arbitrary code via (1) beagle, (2) tomboy, or (3) blam. NOTE: in August 2007, the tomboy vector was reported for other distributions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| novell suse linux | = 10.0 | No fix listed |
| suse linux | = 9.3 | No fix listed |
References
- bugs.gentoo.org
- bugs.gentoo.org
- bugs.gentoo.org
- 39577 vdb-entry
- 39578 vdb-entry
- 26480 third-party-advisory vendor-advisory
- 27608 third-party-advisory vendor-advisory
- 27621 third-party-advisory vendor-advisory
- 27799 third-party-advisory vendor-advisory
- 28339 third-party-advisory vendor-advisory
- 28672 third-party-advisory vendor-advisory
- GLSA-200711-12 vendor-advisory
- GLSA-200801-14 vendor-advisory
- MDVSA-2008:064 vendor-advisory
- SUSE-SR:2005:022 vendor-advisory
- 25341 vdb-entry
- bugzilla.gnome.org
- bugzilla.redhat.com
- tomboy-ldlibrarypath-privilege-escalation(36054) vdb-entry
- USN-560-1 vendor-advisory
- FEDORA-2007-3011 vendor-advisory
- FEDORA-2007-3792 vendor-advisory