CVE-2005-4790

Description

Multiple untrusted search path vulnerabilities in SUSE Linux 9.3 and 10.0, and possibly other distributions, cause the working directory to be added to LD_LIBRARY_PATH, which might allow local users to execute arbitrary code via (1) beagle, (2) tomboy, or (3) blam. NOTE: in August 2007, the tomboy vector was reported for other distributions.

6.9

CVSS

Severity: Medium

CVSS 2.0 •

EPSS 0.08%

Vendor Advisory mandriva.com Vendor Advisory novell.com Vendor Advisory gentoo.org Vendor Advisory redhat.com Vendor Advisory ubuntu.com Vendor Advisory redhat.com Vendor Advisory gentoo.org Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com

Affected: n/a n/a

References

Link	Tags
http://bugs.gentoo.org/show_bug.cgi?id=188806
http://bugs.gentoo.org/show_bug.cgi?id=199841
http://secunia.com/advisories/27621	third party advisory vendor advisory
http://secunia.com/advisories/27608	third party advisory vendor advisory
http://secunia.com/advisories/28672	third party advisory vendor advisory
https://bugzilla.gnome.org/show_bug.cgi?id=485224
http://www.mandriva.com/security/advisories?name=MDVSA-2008:064	vendor advisory
http://osvdb.org/39578	vdb entry
http://secunia.com/advisories/27799	third party advisory vendor advisory
https://bugzilla.redhat.com/show_bug.cgi?id=362941
http://bugs.gentoo.org/show_bug.cgi?id=189249
http://secunia.com/advisories/26480	third party advisory vendor advisory
http://www.novell.com/linux/security/advisories/2005_22_sr.html	vendor advisory
http://secunia.com/advisories/28339	third party advisory vendor advisory
http://security.gentoo.org/glsa/glsa-200711-12.xml	vendor advisory
http://osvdb.org/39577	vdb entry
http://www.securityfocus.com/bid/25341	vdb entry
https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00206.html	vendor advisory
https://usn.ubuntu.com/560-1/	vendor advisory
https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00913.html	vendor advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/36054	vdb entry
http://security.gentoo.org/glsa/glsa-200801-14.xml	vendor advisory

Frequently Asked Questions

What is the severity of CVE-2005-4790?: CVE-2005-4790 has been scored as a medium severity vulnerability.
How to fix CVE-2005-4790?: To fix CVE-2005-4790, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2005-4790 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2005-4790 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.