PT-2009-6260 · Dstat · Dstat

Published 2009-11-27 · Updated 2009-12-31 · CVE-2009-4081

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Medium

Base vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions dstat versions prior to r3199

Description The issue is related to an untrusted search path vulnerability. It allows local users to gain privileges via a Trojan horse Python module in the current working directory.

Recommendations For versions prior to r3199, update to version r3199 or later to resolve the issue.

Fix

Related Identifiers

CVE-2009-4081

Affected Products

Dstat

References · 3

• http://bugs.gentoo.org/show_bug.cgi?id=293497 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2009-4081 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2009:341 · Vendor Advisory