CVE-2007-4432: Medium severity SUSE SuSE Linux vulnerability
Untrusted search path vulnerability in the wrapper scripts for the (1) rug, (2) zen-updater, (3) zen-installer, and (4) zen-remover programs on SUSE Linux 10.1 and Enterprise 10 allows local users to gain privileges via modified (a) LDLIBRARYPATH and (b) MONOGACPREFIX environment variables.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4432?
CVE-2007-4432 is classified as a high severity vulnerability due to the potential for local privilege escalation.
How do I fix CVE-2007-4432?
To mitigate CVE-2007-4432, ensure that environment variables such as LD_LIBRARY_PATH and MONO_GAC_PREFIX are not set to untrusted directories and apply any available patches or updates from SUSE.
Who is affected by CVE-2007-4432?
CVE-2007-4432 affects users running SUSE Linux 10.1 and SUSE Linux Enterprise 10.
What types of attacks can exploit CVE-2007-4432?
CVE-2007-4432 can be exploited through local attacks where a user can manipulate library paths to execute arbitrary code with elevated privileges.
Is CVE-2007-4432 a remote vulnerability?
No, CVE-2007-4432 is not a remote vulnerability; it requires local access to the system to be exploited.