← Back

CVE-2009-3894

nvd nist
Published: Nov 29, 2009Modified: Apr 23, 2026

JSON object

Loading...
4.4
Vector
AV:L/AC:M/Au:N/C:P/I:P/A:P
Exploitability: 3.4 / Impact: 6.4
Source: NVD

Description

Multiple untrusted search path vulnerabilities in dstat before 0.7.0 allow local users to gain privileges via a Trojan horse Python module in (1) the current working directory or (2) a certain subdirectory of the current working directory.

Affected (24)

Products: Dag.wieers: Dstat
Dag.wieers
1 product
Dstat
Configuration A
24 vulnerable
Vulnerable SoftwareAffected Versions
Dag.wieers
Dstat
version ≤ 0.6.9
Dstat
Version 0.1
Dstat
Version 0.2
Dstat
Version 0.3
Dstat
Version 0.4
Dstat
Version 0.5.10
Dstat
Version 0.5.2
Dstat
Version 0.5.3
Dstat
Version 0.5.4
Dstat
Version 0.5.5
Dstat
Version 0.5.6
Dstat
Version 0.5.7
Dstat
Version 0.5.8
Dstat
Version 0.5.9
Dstat
Version 0.5
Dstat
Version 0.6.0
Dstat
Version 0.6.1
Dstat
Version 0.6.2
Dstat
Version 0.6.3
Dstat
Version 0.6.4
Dstat
Version 0.6.5
Dstat
Version 0.6.6
Dstat
Version 0.6.7
Dstat
Version 0.6.8

References (22)

Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Patch
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.