NVD

Id
72510  
Name
CVE-2004-2133  
Description
Certain third-party packages for CVSup 16.1h, such as SuSE Linux, contain untrusted paths in the ELF RPATH fields of certain executables, which could allow local users to execute arbitrary code by causing cvsup to link against malicious libraries that are created in world-writable directories such as /usr/src/packages.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2004-01-29  
Modified Date
2017-07-10  
Seq
2004-2133  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
374114 72510 CVE-2004-2133 20040129 Security Announcement: untrusted ELF library path in some cvsup binary RPMs  View
374115 72510 CVE-2004-2133 20040129 Security Announcement: untrusted ELF library path in some cvsup binary RPMs  View
374116 72510 CVE-2004-2133 9523  View
374117 72510 CVE-2004-2133 cvsup-rpath-gain-privileges(14994)  View

Related JVN