CVE-2008-0302

Felipe Sateler discovered that apt-listchanges did not use safe paths when importing additional Python libraries A local attacker could exploit this and execute arbitrary commands as the user running apt-listchanges ...

Felipe Sateler discovered that apt-listchanges, a package change history notification tool, used unsafe paths when importing its python libraries This could allow the execution of arbitrary shell commands if the root user executed the command in a directory which other local users may write to For the old stable distribution (sarge), this problem ...