Ocs Inventory · Ocsinventory-Agent · CVE-2009-0667
**Name of the Vulnerable Software and Affected Versions**
Ocsinventory-Agent versions prior to 0.0.9.3
Ocsinventory-Agent versions 1.x prior to 1.0.1
**Description**
The issue allows local users to gain privileges via a Trojan horse Perl module in an arbitrary directory. Multiple vulnerabilities in the ocsinventory-agent package may lead to disruption of confidentiality, integrity, and availability of protected information, potentially exploitable by a local attacker.
**Recommendations**
For Ocsinventory-Agent versions prior to 0.0.9.3, update to version 0.0.9.3 or later.
For Ocsinventory-Agent versions 1.x prior to 1.0.1, update to version 1.0.1 or later.