Lucene search
RootSSV:4813HistoryFeb 23, 2009 - 12:00 a.m.
Epiphany PySys_SetArgv函数命令执行漏
2009-02-2300:00:00
Root
www.seebug.org
30
EPSS
0
Percentile
5.1%
BUGTRAQ ID: 33441
CVE(CAN) ID: CVE-2008-5985
Epiphany是GNOME桌面所使用的WEB浏览器。
Epiphany的python接口使用argv[0]调用PySys_SetArgv函数。由于Python对sys.path变量附加了空字符串，如果工作目录中的文件名匹配epiphany试图导入的python模块名，就可能允许本地用户在系统中执行任意代码。
GNOME Epiphany 2.22.3
厂商补丁：
GNOME
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
<a href=“http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=5;filename=sanitize_sys.path.diff;att=1;bug=504363” target=“_blank”>http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=5;filename=sanitize_sys.path.diff;att=1;bug=504363</a>
Related
nessus
nessus
GLSA-200903-16 : Epiphany: Untrusted search path
2009-03-10 00:00:00
Mandriva Linux Security Advisory : epiphany (MDVSA-2009:048-2)
2009-04-23 00:00:00
openvas
openvas
Mandrake Security Advisory MDVSA-2009:048 (epiphany)
2009-03-02 00:00:00
Mandrake Security Advisory MDVSA-2009:048-2 (epiphany)
2009-03-02 00:00:00
Gentoo Security Advisory GLSA 200903-16 (epiphany)
2009-03-13 00:00:00
securityvulns
securityvulns
[ MDVSA-2009:048-1 ] epiphany
2009-02-24 00:00:00
[ MDVSA-2009:048 ] epiphany
2009-02-25 00:00:00
blender / gedit / gnumeric / vim / eog python scripts code execution
2009-04-07 00:00:00
gentoo
gentoo
Epiphany: Untrusted search path
2009-03-09 00:00:00
freebsd
freebsd
epiphany -- untrusted search path vulnerability
2009-01-26 00:00:00
cvelist
cvelist
CVE-2008-5985
2009-01-28 11:00:00
nvd
nvd
CVE-2008-5985
2009-01-28 11:30:00
debiancve
debiancve
CVE-2008-5985
2009-01-28 11:30:00
ubuntucve
ubuntucve
CVE-2008-5985
2009-01-28 00:00:00
cve
cve
CVE-2008-5985
2009-01-28 11:30:00
prion
prion
Design/Logic Flaw
2009-01-28 11:30:00