CVE

Id
36103  
CVE No.
CVE-2008-5986  
Status
Candidate  
Description
Untrusted search path vulnerability in the (1) "VST plugin with Python scripting" and (2) "VST plugin for writing score generators in Python" in Csound 5.08.2, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).  
Phase
Assigned (20090127)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
396060 36103 CVE-2008-5986 MLIST:[oss-security] 20090126 CVE request -- Python < 2.6 PySys_SetArgv issues (epiphany, csound, dia, eog, gedit, xchat, vim, nautilus-python, Gnumeric)  View
396061 36103 CVE-2008-5986 URL:http://www.openwall.com/lists/oss-security/2009/01/26/2  View
396062 36103 CVE-2008-5986 CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504359  View
396063 36103 CVE-2008-5986 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=481550  View
396064 36103 CVE-2008-5986 BID:33446  View
396065 36103 CVE-2008-5986 URL:http://www.securityfocus.com/bid/33446  View
396066 36103 CVE-2008-5986 XF:csound-pysyssetargv-privilege-escalation(48276)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41778 JVNDB-2009-002785 emergecolab の connect/init.inc におけるディレクトリトラバーサルの脆弱性 emergecolab の connect/init.inc には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-5990 36103 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002785.html  View