REDHAT-BUG-481560: Low severity hexchat vulnerability
Untrusted search path vulnerability in the Python module of xchat allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to an erroneous setting of sys.path by the PySysSetArgv function.
References (test case, PoC): http://www.nabble.com/Bug-484305%3A-bicyclerepair%3A-bike.vim-imports-untrusted-python-files-from-cwd-td18848099.html
Proposed patch: The Debian patch for similar dia's Python related issue, available at:
http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=5;filename=pythonpath.diff;att=1;bug=504251
should be sufficient to resolve this issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-481560?
The severity of REDHAT-BUG-481560 is considered high due to the potential for arbitrary code execution by local users.
How do I fix REDHAT-BUG-481560?
To fix REDHAT-BUG-481560, ensure that your Python version and XChat are updated to the latest patches that address this vulnerability.
Who is affected by REDHAT-BUG-481560?
Local users running vulnerable versions of the XChat application and the Python module are affected by REDHAT-BUG-481560.
What causes the REDHAT-BUG-481560 vulnerability?
The REDHAT-BUG-481560 vulnerability is caused by an untrusted search path, allowing execution of malicious Python files through improper handling of sys.path.
Is there a known exploit for REDHAT-BUG-481560?
Yes, there are reported test cases and proof-of-concept exploits demonstrating the REDHAT-BUG-481560 vulnerability in the wild.