CVE-2008-0302

Published: Jan 17, 2008Modified: Apr 23, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Untrusted search path vulnerability in apt-listchanges.py in apt-listchanges before 2.82 allows local users to execute arbitrary code via a malicious apt-listchanges program in the current working directory.

Affected (1)

Products: Debian: Apt Listchanges

Debian

1 product

Apt Listchanges

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Debian Apt Listchanges	Up to 2.81

Related CWEs

CWE-94

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (14)

http://git.madism.org/?p=apt-listchanges.git%3Ba=commitdiff%3Bh=1bcfbf3dc55413bb83a1782dc9a54515a963fb32

Source: cve@mitre.org

http://packages.debian.org/changelogs/pool/main/a/apt-listchanges/apt-listchanges_2.82/changelog

Source: cve@mitre.org

http://secunia.com/advisories/28513

Source: cve@mitre.org

http://secunia.com/advisories/28574

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1465

Source: cve@mitre.org

http://www.securityfocus.com/bid/27331

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-572-1

Source: cve@mitre.org

http://git.madism.org/?p=apt-listchanges.git%3Ba=commitdiff%3Bh=1bcfbf3dc55413bb83a1782dc9a54515a963fb32