Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting Tool (ABRT) 2.0.9 and previous versions allows local users to load and execute arbitrary Python modules by modifying the PYTHONPATH environment variable to reference a malicious Python module.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
redhat automatic bug reporting tool 2.0.4.980 |
||
redhat automatic bug reporting tool 2.0.4 |
||
redhat automatic bug reporting tool 2.0.3 |
||
redhat automatic bug reporting tool 2.0.2 |
||
redhat automatic bug reporting tool |
||
redhat automatic bug reporting tool 2.0.8 |
||
redhat automatic bug reporting tool 2.0.7 |
||
redhat automatic bug reporting tool 2.0.5 |
||
redhat automatic bug reporting tool 2.0.0 |
||
redhat automatic bug reporting tool 2.0.6 |
||
redhat automatic bug reporting tool 2.0.4.981 |
||
redhat automatic bug reporting tool 2.0.1 |