PT-2009-6260 · Dstat · Dstat

Publicado 2009-11-27 · Atualizado 2009-12-31 · CVE-2009-4081

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Média

Vetor base

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions dstat versions prior to r3199

Description The issue is related to an untrusted search path vulnerability. It allows local users to gain privileges via a Trojan horse Python module in the current working directory.

Recommendations For versions prior to r3199, update to version r3199 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2009-4081

Produtos afetados

Dstat

Referências · 3

• http://bugs.gentoo.org/show_bug.cgi?id=293497 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2009-4081 · Nota de Segurança
• http://mandriva.com/security/advisories?name=MDVSA-2009:341 · Aviso do Fabricante