Lucene search
HistoryNov 29, 2007 - 1:46 a.m.
CVE-2007-6167
cve-2007-6167
untrusted search path
vulnerability
yast2-core
suse linux
local users
arbitrary code
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Untrusted search path vulnerability in yast2-core in SUSE Linux might allow local users to execute arbitrary code by creating a malicious yast2 module in the current working directory.
Affected configurations
Node
susesuse_linux
| CPE | Name | Operator | Version |
|---|---|---|---|
| suse:suse_linux | suse suse linux | eq | * |
Related
prion
prion
Design/Logic Flaw
2007-11-29 01:46:00
Design/Logic Flaw
2008-01-10 01:46:00
nvd
nvd
CVE-2007-6167
2007-11-29 01:46:00
CVE-2007-6678
2008-01-10 01:46:00
cvelist
cvelist
CVE-2007-6167
2007-11-29 01:00:00
cve
cve
CVE-2007-6678
2008-01-10 01:46:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2007-6167