NVD

Id
4220  
Name
CVE-2008-4394  
Description
Multiple untrusted search path vulnerabilities in Portage before 2.1.4.5 include the current working directory in the Python search path, which allows local users to execute arbitrary code via a modified Python module that is loaded by the (1) ys-apps/portage, (2) net-mail/fetchmail, (3) app-editors/leo ebuilds, and other ebuilds.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-10-10  
Modified Date
2009-07-23  
Seq
2008-4394  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
26814 4220 CVE-2008-4394 GLSA-200810-02  View
26815 4220 CVE-2008-4394 31670  View
26816 4220 CVE-2008-4394 portage-search-path-priv-escalation(45792)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48186 JVNDB-2008-003496 Portage における任意のコードを実行される脆弱性 Portage は、検索パスに関する処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2008-4394 34507 CVE-2008-4394 4220 6.9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003496.html 2008-10-09 2012-06-26 View