Untrusted search path vulnerability in valgrind before 3.4.0 allows local users to execute arbitrary programs via a Trojan horse .valgrindrc file in the current working directory, as demonstrated using a malicious --db-command options. NOTE: the severity of this issue has been disputed, but CVE is including this issue because execution of a program from an untrusted directory is a common scenario.
Novell Linux Desktop 9 SDK for x86 Novell Linux Desktop 9 SDK for x86_64 openSUSE 10.3 openSUSE 11.0 openSUSE Tumbleweed SLES SDK 9 for x86 SLES SDK 9 for X86-64 SUSE Linux Enterprise SDK 10 SP2 SUSE Linux Enterprise Software Development Kit 11 SP4