CVE-2008-4865

Related Files

Mandriva Linux Security Advisory 2009-057

Posted Feb 26, 2009

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2009-057 - Untrusted search path vulnerability in valgrind before 3.4.0 allows local users to execute arbitrary programs via a Trojan horse .valgrindrc file in the current working directory, as demonstrated using a malicious --db-command options. NOTE: the severity of this issue has been disputed, but CVE is including this issue because execution of a program from an untrusted directory is a common scenario. The updated packages have been patched to prevent this.

tags | advisory, arbitrary, local, trojan

systems | linux, mandriva

advisories | CVE-2008-4865

SHA-256 | 84053efc1d16fb6b179a05f51bb8abc2f8d65bdafb3b9bdbbdd207d526c49ccc

Download | Favorite | View

Gentoo Linux Security Advisory 200902-3

Posted Feb 12, 2009

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory GLSA 200902-03 - An untrusted search path vulnerability in Valgrind might result in the execution of arbitrary code. Tavis Ormandy reported that Valgrind loads a .valgrindrc file in the current working directory, executing commands specified there. Versions less than 3.4.0 are affected.

tags | advisory, arbitrary

systems | linux, gentoo

advisories | CVE-2008-4865

SHA-256 | 75a6bce8f765b9f7d40c28eb61f9aa4b9f47555fdf157d4e90dc3535d6589745

Download | Favorite | View