Уязвимость CVE-2009-3894: Информация

Описание

Multiple untrusted search path vulnerabilities in dstat before 0.7.0 allow local users to gain privileges via a Trojan horse Python module in (1) the current working directory or (2) a certain subdirectory of the current working directory.

Важность: MEDIUM (4,4)

Ссылки на рекомендации, решения и инструменты

1. Подверженные конфигурации:

   1. Конфигурация 1

      cpe:2.3:a:dag.wieers:dstat:0.6.1:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dag.wieers:dstat:0.5.8:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dag.wieers:dstat:0.6.7:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dag.wieers:dstat:0.1:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dag.wieers:dstat:0.6.3:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dag.wieers:dstat:0.5.4:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dag.wieers:dstat:0.4:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dag.wieers:dstat:*:*:*:*:*:*:*:*

      End including

      0.6.9

      ---

      cpe:2.3:a:dag.wieers:dstat:0.6.8:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dag.wieers:dstat:0.3:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dag.wieers:dstat:0.5.2:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dag.wieers:dstat:0.5.7:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dag.wieers:dstat:0.5.10:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dag.wieers:dstat:0.6.2:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dag.wieers:dstat:0.6.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dag.wieers:dstat:0.5.5:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dag.wieers:dstat:0.6.6:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dag.wieers:dstat:0.6.4:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dag.wieers:dstat:0.5.6:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dag.wieers:dstat:0.5.3:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dag.wieers:dstat:0.5.9:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dag.wieers:dstat:0.6.5:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dag.wieers:dstat:0.5:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:dag.wieers:dstat:0.2:*:*:*:*:*:*:*

      ---