PT-2005-5454 · Suse · Suse Linux

Publicado 2005-12-31 · Atualizado 2024-06-15 · CVE-2005-4791

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SUSE Linux version 10.0

Description The issue is related to multiple untrusted search path vulnerabilities. These vulnerabilities cause the working directory to be added to LD LIBRARY PATH, which might allow local users to execute arbitrary code. This can be achieved via certain applications.

Recommendations For SUSE Linux version 10.0, consider restricting access to sensitive directories and limiting the use of potentially vulnerable applications until a fix is available. As a temporary workaround, avoid using applications such as liferea or banshee in untrusted environments to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-4791

DTSA-107-1

OPENSUSE-SU-2024:11020-1

Produtos afetados

Suse Linux

Referências · 12

• https://osv.dev/vulnerability/openSUSE-SU-2024:11020-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2005-4791 · Nota
• http://novell.com/linux/security/advisories/2005_22_sr.html · Correção, Aviso do Fabricante
• http://osvdb.org/39580 · Nota
• http://securityfocus.com/bid/15040 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4791 · Nota de Segurança
• http://vupen.com/english/advisories/2007/3965 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-4791 · Aviso do Fabricante
• http://sourceforge.net/project/shownotes.php?release_id=555823&group_id=87005 · Nota
• https://security-tracker.debian.org/tracker/CVE-2005-4791 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2005-4791 · Aviso do Fabricante
• http://secunia.com/advisories/27771 · Nota