CVE-2008-0302: Code Injection
First published: Thu Jan 17 2008(Updated: )
Untrusted search path vulnerability in apt-listchanges.py in apt-listchanges before 2.82 allows local users to execute arbitrary code via a malicious apt-listchanges program in the current working directory.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Debian Apt-listchanges | <=2.81 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packages.debian.org/changelogs/pool/main/a/apt-listchanges/apt-listchanges_2.82/changelog
- http://git.madism.org/?p=apt-listchanges.git;a=commitdiff;h=1bcfbf3dc55413bb83a1782dc9a54515a963fb32
- http://www.debian.org/security/2008/dsa-1465
- http://www.securityfocus.com/bid/27331
- http://secunia.com/advisories/28513
- http://www.ubuntu.com/usn/usn-572-1
- http://secunia.com/advisories/28574
- http://git.madism.org/?p=apt-listchanges.git%3Ba=commitdiff%3Bh=1bcfbf3dc55413bb83a1782dc9a54515a963fb32
- collector/nvd-historical
- collector/nvd-index
- collector/nvd-api
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/description
- agent/type
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/debian
- canonical/debian apt-listchanges
- version/debian apt-listchanges/2.81