CVE-2005-4443

Untrusted search path vulnerability in Gauche before 0.8.6-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH.

Score

CVSS 2.0 7.2 High

Status

Modified - cve@mitre.org

Published

2005-12-21

Last modified

2024-09-17

Affected products

• Gauche (Gauche)

References

• http://secunia.com/advisories/18040/
• http://www.gentoo.org/security/en/glsa/glsa-200512-07.xml
• http://www.securityfocus.com/bid/15120