CVE-2008-1132

Untrusted search path vulnerability in src/mainwindow.c in Net Activity Viewer 0.2.1 allows local users with Net Activity Viewer privileges to execute arbitrary code via a malicious gksu program, which is invoked during the Restart As Root action.

Score

CVSS 2.0 4.7 Medium

Status

Modified - cve@mitre.org

Published

2008-03-04

Last modified

2024-09-17

Weaknesses

CWE-264

Affected products

• Net Activity Viewer (Net Activity Viewer)

References

• http://secunia.com/advisories/29097
• http://sourceforge.net/project/shownotes.php?release_id=579181