CVE-2009-0314: Medium severity Gnome Libpeas vulnerability
Untrusted search path vulnerability in gedit's Python module allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to an erroneous setting of sys.path by the PySysSetArgv function.
References: http://www.nabble.com/Bug-484305%3A-bicyclerepair%3A-bike.vim-imports-untrusted-python-files-from-cwd-td18848099.html
Debian bug report for similar eog issue: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504352#4
Proposed patch: Not sure, if gedi'ts upstream has been reported about this issue. The Debian patch for similar eog's Python related issue, available at:
http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=5;filename=02sanitizesys.path.patch;att=1;bug=504352
should be sufficient to resolve this issue.
Other sources
Untrusted search path vulnerability in the Python module in gedit allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySysSetArgv function (CVE-2008-5983).
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch 02_sanitize_sys.path.patch - Configuration
Sanitize sys.path so the current working directory is not included in the import search path (apply patch 02_sanitize_sys.path.patch to implement this change)
gedit Python module sys.path = exclude current working directory (sanitize sys.path)
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0314?
CVE-2009-0314 has a medium severity rating due to the potential for local users to execute arbitrary code.
How do I fix CVE-2009-0314?
To fix CVE-2009-0314, update the Gnome Libpeas software to version 0.5.3 or later.
What software is affected by CVE-2009-0314?
CVE-2009-0314 affects Gnome Libpeas versions prior to 0.5.3 and Fedora version 9.
What types of attacks can exploit CVE-2009-0314?
CVE-2009-0314 can be exploited through the execution of a Trojan horse Python file located in the current working directory.
Is CVE-2009-0314 applicable to remote users?
CVE-2009-0314 is primarily a local user vulnerability, meaning it cannot be exploited by remote users.