CVE

Id
32483  
CVE No.
CVE-2008-2366  
Status
Candidate  
Description
Untrusted search path vulnerability in a certain Red Hat build script for OpenOffice.org (OOo) 1.1.x on Red Hat Enterprise Linux (RHEL) 3 and 4 allows local users to gain privileges via a malicious library in the current working directory, related to incorrect quoting of the ORIGIN symbol for use in the RPATH library path.  
Phase
Assigned (20080521)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
351394 32483 CVE-2008-2366 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=450532  View
351395 32483 CVE-2008-2366 REDHAT:RHSA-2008:0538  View
351396 32483 CVE-2008-2366 URL:http://www.redhat.com/support/errata/RHSA-2008-0538.html  View
351397 32483 CVE-2008-2366 BID:29695  View
351398 32483 CVE-2008-2366 URL:http://www.securityfocus.com/bid/29695  View
351399 32483 CVE-2008-2366 OVAL:oval:org.mitre.oval:def:11361  View
351400 32483 CVE-2008-2366 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11361  View
351401 32483 CVE-2008-2366 SECTRACK:1020278  View
351402 32483 CVE-2008-2366 URL:http://securitytracker.com/id?1020278  View
351403 32483 CVE-2008-2366 SECUNIA:30633  View
351404 32483 CVE-2008-2366 URL:http://secunia.com/advisories/30633  View
351405 32483 CVE-2008-2366 XF:redhat-ooo-buildscript-code-execution(43322)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46296 JVNDB-2008-001606 Apache Tomcat の RequestDispatcher に関するディレクトリトラバーサルの脆弱性 Apache Tomcat は RequestDispatcher を使用している場合、URI からのクエリ文字列を削除する前にパスの正常化が動作するため、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-2370 32483 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001606.html  View