CVE-2015-3887 Untrusted search path vulnerability in ProxyChains-NG before 4.9 allows local users to gain privileges via a Trojan horse libproxychains4.so library in the current working directory, which is referenc...
HighCVSS 7.8
EPSS 0.49%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in ProxyChains-NG before 4.9 allows local users to gain privileges via a Trojan horse libproxychains4.so library in the current working directory, which is referenced in the LD_PRELOAD path.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| proxychains-ng project proxychains-ng | <= 4.8.1 | No fix listed |
References
- [oss-security] 20150513 Re: CVE request for proxychains-ng : current path as the first directory for the library search path issue-tracking mailing-list patch third-party-advisory
- 74648 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking patch third-party-advisory
- github.com issue-tracking release-notes
- github.com issue-tracking patch third-party-advisory
- github.com issue-tracking patch third-party-advisory