CVE-2004-2133

Published: Jan 29, 2004Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Certain third-party packages for CVSup 16.1h, such as SuSE Linux, contain untrusted paths in the ELF RPATH fields of certain executables, which could allow local users to execute arbitrary code by causing cvsup to link against malicious libraries that are created in world-writable directories such as /usr/src/packages.

Affected (3)

Products: Cvsup: Cvsup

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Cvsup Cvsup	Version cvsup-16.1h-2.i386.rpm
Cvsup Cvsup	Version cvsup-16.1h-36.i586.rpm
Cvsup Cvsup	Version cvsup-16.1h-43.i586.rpm

References (8)

http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0025.html

Source: cve@mitre.org

ExploitVendor Advisory

http://marc.info/?l=bugtraq&m=107539776002450&w=2

Source: cve@mitre.org

http://www.securityfocus.com/bid/9523

Source: cve@mitre.org

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/14994

Source: cve@mitre.org

http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0025.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://marc.info/?l=bugtraq&m=107539776002450&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/9523

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/14994

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.