Vulnerability Name:

CVE-2005-4791 (CCN-26372)

Assigned:2005-10-07
Published:2005-10-07
Updated:2018-10-30
Summary:Multiple untrusted search path vulnerabilities in SUSE Linux 10.0 cause the working directory to be added to LD_LIBRARY_PATH, which might allow local users to execute arbitrary code via (1) liferea or (2) banshee.
CVSS v3 Severity:2.8 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): Low
User Interaction (UI): Required
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): Low
Availibility (A): None
CVSS v2 Severity:2.1 Low (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N)
1.6 Low (Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): None
1.7 Low (CCN CVSS v2 Vector: AV:L/AC:L/Au:S/C:N/I:P/A:N)
1.3 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:S/C:N/I:P/A:N/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): None
Vulnerability Type:CWE-Other
Vulnerability Consequences:Gain Privileges
References:Source: MITRE
Type: CNA
CVE-2005-4790

Source: MITRE
Type: CNA
CVE-2005-4791

Source: OSVDB
Type: UNKNOWN
39580

Source: CCN
Type: SA26480
Tomboy Insecure LD_LIBRARY_PATH Privilege Escalation

Source: CCN
Type: SA27771
Liferea Insecure LD_LIBRARY_PATH Privilege Escalation

Source: SECUNIA
Type: UNKNOWN
27771

Source: CCN
Type: SourceForge.net: Files
Liferea - File Release Notes and Changelog - Release Name: 1.4.8

Source: CONFIRM
Type: UNKNOWN
http://sourceforge.net/project/shownotes.php?release_id=555823&group_id=87005

Source: CCN
Type: GLSA-200711-12
Tomboy: User-assisted execution of arbitrary code

Source: CCN
Type: GLSA-200801-14
Blam: User-assisted execution of arbitrary code

Source: SUSE
Type: Patch
SUSE-SR:2005:022

Source: CCN
Type: OSVDB ID: 19982
SuSE Linux beagle LD_LIBRARY_PATH Variable Path Subversion Local Privilege Escalation

Source: CCN
Type: OSVDB ID: 39577
SuSE Linux blam LD_LIBRARY_PATH Variable Path Subversion Local Privilege Escalation

Source: CCN
Type: OSVDB ID: 39578
SuSE Linux tomboy LD_LIBRARY_PATH Variable Path Subversion Local Privilege Escalation

Source: CCN
Type: OSVDB ID: 39579
Liferea LD_LIBRARY_PATH Variable Path Subversion Local Privilege Escalation

Source: CCN
Type: OSVDB ID: 39580
SuSE Linux banshee LD_LIBRARY_PATH Variable Path Subversion Local Privilege Escalation

Source: BID
Type: UNKNOWN
15040

Source: CCN
Type: BID-15040
SUSE Linux Multiple Local Privilege Escalation Vulnerabilities

Source: CCN
Type: BID-25341
Tomboy LD_LIBRARY_PATH Environment Variable Local Privilege Escalation Vulnerability

Source: CCN
Type: USN-560-1
Tomboy vulnerability

Source: VUPEN
Type: UNKNOWN
ADV-2007-3965

Source: XF
Type: UNKNOWN
suse-searchpath-code-execution(26372)

Vulnerable Configuration:Configuration 1:
  • cpe:/o:novell:suse_linux:10.0:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/o:suse:suse_linux:10.0::oss:*:*:*:*:*
  • OR cpe:/o:suse:suse_linux:9.3:*:*:*:*:*:*:*
  • AND
  • cpe:/o:gentoo:linux:*:*:*:*:*:*:*:*
  • OR cpe:/o:canonical:ubuntu:6.06::lts:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:2007.1:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:2008.0::x86-64:*:*:*:*:*
  • OR cpe:/o:canonical:ubuntu:7.04:*:*:*:*:*:*:*
  • OR cpe:/o:canonical:ubuntu:7.10:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:2008.0:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:2007.1::x86-64:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:112947
    P
    		liferea-1.13.6-2.2 on GA media (Moderate)
    2022-01-17
    oval:org.opensuse.security:def:106401
    P
    		liferea-1.13.6-2.2 on GA media (Moderate)
    2021-10-01
    BACK
    novell suse linux 10.0
    suse suse linux 10.0
    suse suse linux 9.3
    gentoo linux *
    canonical ubuntu 6.06
    mandrakesoft mandrake linux 2007.1
    mandrakesoft mandrake linux 2008.0
    canonical ubuntu 7.04
    canonical ubuntu 7.10
    mandrakesoft mandrake linux 2008.0
    mandrakesoft mandrake linux 2007.1