CVE

Id
34982  
CVE No.
CVE-2008-4865  
Status
Candidate  
Description
Untrusted search path vulnerability in valgrind before 3.4.0 allows local users to execute arbitrary programs via a Trojan horse .valgrindrc file in the current working directory, as demonstrated using a malicious --db-command options. NOTE: the severity of this issue has been disputed, but CVE is including this issue because execution of a program from an untrusted directory is a common scenario.  
Phase
Assigned (20081031)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
382866 34982 CVE-2008-4865 MLIST:[oss-security] 20081027 Re: CVE request: lynx (old) .mailcap handling flaw  View
382867 34982 CVE-2008-4865 URL:http://www.openwall.com/lists/oss-security/2008/10/27/4  View
382868 34982 CVE-2008-4865 MLIST:[oss-security] 20081028 Re: CVE request: lynx (old) .mailcap handling flaw  View
382869 34982 CVE-2008-4865 URL:http://www.openwall.com/lists/oss-security/2008/10/28/5  View
382870 34982 CVE-2008-4865 MLIST:[oss-security] 20081029 Re: CVE request: lynx (old) .mailcap handling flaw  View
382871 34982 CVE-2008-4865 URL:http://www.openwall.com/lists/oss-security/2008/10/29/5  View
382872 34982 CVE-2008-4865 MLIST:[oss-security] 20081029 Re: CVE request: lynx (old) .mailcap handling flaw  View
382873 34982 CVE-2008-4865 URL:http://www.openwall.com/lists/oss-security/2008/10/29/9  View
382874 34982 CVE-2008-4865 MLIST:[valgrind-announce] 20090103 Valgrind-3.4.0 is available  View
382875 34982 CVE-2008-4865 URL:http://sourceforge.net/mailarchive/forum.php?thread_name=200901032045.17604.jseward%40acm.org&forum_name=valgrind-announce  View
382876 34982 CVE-2008-4865 GENTOO:GLSA-200902-03  View
382877 34982 CVE-2008-4865 URL:http://security.gentoo.org/glsa/glsa-200902-03.xml  View
382878 34982 CVE-2008-4865 SUSE:SUSE-SR:2009:002  View
382879 34982 CVE-2008-4865 URL:http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html  View
382880 34982 CVE-2008-4865 SECUNIA:33568  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48284 JVNDB-2008-003594 MPlayer で使用される FFmpeg におけるサービス運用妨害 (DoS) の脆弱性 MPlayer で使用される FFmpeg には、サービス運用妨害 (メモリ消費) 状態となる脆弱性が存在します。 CVE-2008-4869 34982 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003594.html  View