CVE-2008-2230 Untrusted search path vulnerability in (1) reportbug 3.8 and 3.31, and (2) reportbug-ng before 0.2008.06.04, allows local users to execute arbitrary code via a malicious module file in the current wor...
MediumCVSS 4.6
EPSS 0.53%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in (1) reportbug 3.8 and 3.31, and (2) reportbug-ng before 0.2008.06.04, allows local users to execute arbitrary code via a malicious module file in the current working directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| reportbug-ng reportbug | = 3.8 | No fix listed |
| reportbug-ng reportbug | = 3.31 | No fix listed |
| reportbug-ng | = 0.2007.03.10 | No fix listed |
| reportbug-ng | = 0.2007.03.11 | No fix listed |
| reportbug-ng | = 0.2007.03.13 | No fix listed |
| reportbug-ng | = 0.2007.03.14 | No fix listed |
| reportbug-ng | = 0.2007.03.15 | No fix listed |
| reportbug-ng | = 0.2007.03.17 | No fix listed |
| reportbug-ng | = 0.2007.03.19 | No fix listed |
| reportbug-ng | = 0.2007.03.19.2 | No fix listed |
| reportbug-ng | = 0.2007.03.20 | No fix listed |
| reportbug-ng | = 0.2007.03.24 | No fix listed |
| reportbug-ng | = 0.2007.03.27 | No fix listed |
| reportbug-ng | = 0.2007.03.28 | No fix listed |
| reportbug-ng | = 0.2007.03.29 | No fix listed |
| reportbug-ng | = 0.2007.04.07 | No fix listed |
| reportbug-ng | = 0.2007.04.07.2 | No fix listed |
| reportbug-ng | = 0.2007.04.13 | No fix listed |
| reportbug-ng | = 0.2007.04.16 | No fix listed |
| reportbug-ng | = 0.2007.04.20 | No fix listed |
| reportbug-ng | = 0.2007.04.23 | No fix listed |
| reportbug-ng | = 0.2007.04.27 | No fix listed |
| reportbug-ng | = 0.2007.05.02 | No fix listed |
| reportbug-ng | = 0.2007.05.27 | No fix listed |
| reportbug-ng | = 0.2007.05.28 | No fix listed |
Show 19 more
| Product | Affected versions | Fixed in |
|---|---|---|
| reportbug-ng | = 0.2007.05.31 | No fix listed |
| reportbug-ng | = 0.2007.06.13 | No fix listed |
| reportbug-ng | = 0.2007.06.27 | No fix listed |
| reportbug-ng | = 0.2007.07.08 | No fix listed |
| reportbug-ng | = 0.2007.07.12 | No fix listed |
| reportbug-ng | = 0.2007.07.18 | No fix listed |
| reportbug-ng | = 0.2007.07.19 | No fix listed |
| reportbug-ng | = 0.2007.08.02 | No fix listed |
| reportbug-ng | = 0.2007.08.03 | No fix listed |
| reportbug-ng | = 0.2007.08.03.2 | No fix listed |
| reportbug-ng | = 0.2007.08.12 | No fix listed |
| reportbug-ng | = 0.2007.08.20 | No fix listed |
| reportbug-ng | = 0.2007.10.30 | No fix listed |
| reportbug-ng | = 0.2008.01.20 | No fix listed |
| reportbug-ng | = 0.2008.03.26 | No fix listed |
| reportbug-ng | = 0.2008.03.28 | No fix listed |
| debian reportbug(Debian:12) | < 3.41 | 3.41 |
| debian reportbug(Debian:13) | < 3.41 | 3.41 |
| debian reportbug(Debian:14) | < 3.41 | 3.41 |
References
- bugs.debian.org exploit
- bugs.debian.org exploit
- reportbug-searchpath-code-execution(43001) vdb-entry
- Debian Security Tracker CVE-2008-2230 vendor-advisory
- bugs.debian.org issue-tracking