CVE-2008-4865 Untrusted search path vulnerability in valgrind before 3.4.0 allows local users to execute arbitrary programs via a Trojan horse .valgrindrc file in the current working directory, as demonstrated usin...
HighCVSS 7.2
EPSS 0.43%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in valgrind before 3.4.0 allows local users to execute arbitrary programs via a Trojan horse .valgrindrc file in the current working directory, as demonstrated using a malicious --db-command options. NOTE: the severity of this issue has been disputed, but CVE is including this issue because execution of a program from an untrusted directory is a common scenario.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| valgrind | <= 3.4.0 | No fix listed |
| valgrind | = 1.9.6 | No fix listed |
| valgrind | = 2.0.0 | No fix listed |
| valgrind | = 2.1.0 | No fix listed |
| valgrind | = 2.1.1 | No fix listed |
| valgrind | = 2.2.0 | No fix listed |
| valgrind | = 2.4.1 | No fix listed |
| valgrind | = 3.0.0 | No fix listed |
| valgrind | = 3.0.1 | No fix listed |
| valgrind | = 3.1.0 | No fix listed |
| valgrind | = 3.1.1 | No fix listed |
| valgrind | = 3.2.0 | No fix listed |
| valgrind | = 3.2.1 | No fix listed |
| valgrind | = 3.2.2 | No fix listed |
| valgrind | = 3.2.3 | No fix listed |
| valgrind | = 3.3.0 | No fix listed |
| valgrind | = 3.3.0-rc1 | No fix listed |
| valgrind | = 3.3.0-rc2 | No fix listed |
| valgrind | = 3.3.0-rc3 | No fix listed |
| valgrind | = 3.3.1 | No fix listed |
| valgrind | = 3.3.1-rc1 | No fix listed |
| debian/valgrind(Debian:12) | < 1:3.3.1-3 | 1:3.3.1-3 |
| debian/valgrind(Debian:13) | < 1:3.3.1-3 | 1:3.3.1-3 |
| debian/valgrind(Debian:14) | < 1:3.3.1-3 | 1:3.3.1-3 |
References
- SUSE-SR:2009:002 vendor-advisory
- 33568 third-party-advisory vendor-advisory
- GLSA-200902-03 vendor-advisory
- [valgrind-announce] 20090103 Valgrind-3.4.0 is available mailing-list
- [oss-security] 20081027 Re: CVE request: lynx (old) .mailcap handling flaw mailing-list
- [oss-security] 20081028 Re: CVE request: lynx (old) .mailcap handling flaw mailing-list
- [oss-security] 20081029 Re: CVE request: lynx (old) .mailcap handling flaw mailing-list
- [oss-security] 20081029 Re: CVE request: lynx (old) .mailcap handling flaw mailing-list
- Debian Security Tracker CVE-2008-4865 vendor-advisory
- bugs.debian.org issue-tracking