CVE-2007-6167

Untrusted search path vulnerability in yast2-core in SUSE Linux might allow local users to execute arbitrary code by creating a malicious yast2 module in the current working directory.

Score

CVSS 2.0 7.2 High

Status

Modified - cve@mitre.org

Published

2007-11-29

Last modified

2024-08-07

Weaknesses

CWE-264

Affected products

• Suse Linux (Suse)

References

• http://osvdb.org/44158
• http://secunia.com/advisories/27756
• http://www.novell.com/linux/security/advisories/2007_24_sr.html
• http://www.securityfocus.com/bid/26634