CVE

Id
38289  
CVE No.
CVE-2009-0854  
Status
Candidate  
Description
Untrusted search path vulnerability in dash 0.5.4, when used as a login shell, allows local users to execute arbitrary code via a Trojan horse .profile file in the current working directory.  
Phase
Assigned (20090309)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
417615 38289 CVE-2009-0854 UBUNTU:USN-732-1  View
417616 38289 CVE-2009-0854 URL:http://www.ubuntu.com/usn/USN-732-1  View
417617 38289 CVE-2009-0854 BID:34092  View
417618 38289 CVE-2009-0854 URL:http://www.securityfocus.com/bid/34092  View
417619 38289 CVE-2009-0854 SECUNIA:34205  View
417620 38289 CVE-2009-0854 URL:http://secunia.com/advisories/34205  View
417621 38289 CVE-2009-0854 XF:dash-profile-code-execution(49216)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40885 JVNDB-2009-001891 Daniel J. Bernstein djbdns における DNS レスポンスに任意のレコードを登録される脆弱性 Daniel J. Bernstein djbdns の response_addname 関数には、要求された様式の補正を強制しないため、DNS レスポンスに任意のレコードを登録される脆弱性が存在します。 CVE-2009-0858 38289 5.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001891.html  View