PT-2005-5454 · Suse · Suse Linux

Published 2005-12-31 · Updated 2024-06-15 · CVE-2005-4791

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SUSE Linux version 10.0

Description The issue is related to multiple untrusted search path vulnerabilities. These vulnerabilities cause the working directory to be added to LD LIBRARY PATH, which might allow local users to execute arbitrary code. This can be achieved via certain applications.

Recommendations For SUSE Linux version 10.0, consider restricting access to sensitive directories and limiting the use of potentially vulnerable applications until a fix is available. As a temporary workaround, avoid using applications such as liferea or banshee in untrusted environments to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-4791

DTSA-107-1

OPENSUSE-SU-2024:11020-1

Affected Products

Suse Linux

References · 12

• https://osv.dev/vulnerability/openSUSE-SU-2024:11020-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4791 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-4791 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-4791 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2005-4791 · Vendor Advisory
• https://suse.com/security/cve/CVE-2005-4791 · Note
• http://novell.com/linux/security/advisories/2005_22_sr.html · Patch, Vendor Advisory
• http://osvdb.org/39580 · Note
• http://securityfocus.com/bid/15040 · Note
• http://vupen.com/english/advisories/2007/3965 · Note
• http://sourceforge.net/project/shownotes.php?release_id=555823&group_id=87005 · Note
• http://secunia.com/advisories/27771 · Note