CVE-2008-2378 Untrusted search path vulnerability in hfkernel in hf 0.7.3 and 0.8 allows local users to gain privileges via a Trojan horse killall program in a directory in the PATH, related to improper handling of...
HighCVSS 7.2
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in hfkernel in hf 0.7.3 and 0.8 allows local users to gain privileges via a Trojan horse killall program in a directory in the PATH, related to improper handling of the -k option.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hf | = 0.7.3 | No fix listed |
| hf | = 0.8 | No fix listed |
References
- bugs.debian.org
- 50231 vdb-entry
- 32831 third-party-advisory vendor-advisory
- 32855 patch third-party-advisory vendor-advisory
- DSA-1668 patch vendor-advisory
- 32421 patch vdb-entry
- hf-hfkernel-privilege-escalation(46806) vdb-entry