CVE-2005-4790 - Vulnerability Details - OpenCVE

Multiple untrusted search path vulnerabilities in SUSE Linux 9.3 and 10.0, and possibly other distributions, cause the working directory to be added to LD_LIBRARY_PATH, which might allow local users to execute arbitrary code via (1) beagle, (2) tomboy, or (3) blam. NOTE: in August 2007, the tomboy vector was reported for other distributions.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity Medium

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Novell	Suse Linux
Suse	Suse Linux

Configuration 1 [-]

OR	cpe:2.3:o:novell:suse_linux:10.0:::::::*
	cpe:2.3:o:suse:suse_linux:9.3:::::::*

No data.

References

Link	Providers
http://bugs.gentoo.org/show_bug.cgi?id=188806
http://bugs.gentoo.org/show_bug.cgi?id=189249
http://bugs.gentoo.org/show_bug.cgi?id=199841
http://osvdb.org/39577
http://osvdb.org/39578
http://secunia.com/advisories/26480
http://secunia.com/advisories/27608
http://secunia.com/advisories/27621
http://secunia.com/advisories/27799
http://secunia.com/advisories/28339
http://secunia.com/advisories/28672
http://security.gentoo.org/glsa/glsa-200711-12.xml
http://security.gentoo.org/glsa/glsa-200801-14.xml
http://www.mandriva.com/security/advisories?name=MDVSA-2008:064
http://www.novell.com/linux/security/advisories/2005_22_sr.html
http://www.securityfocus.com/bid/25341
https://bugzilla.gnome.org/show_bug.cgi?id=485224
https://bugzilla.redhat.com/show_bug.cgi?id=362941
https://exchange.xforce.ibmcloud.com/vulnerabilities/36054
https://usn.ubuntu.com/560-1/
https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00206.html
https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00913.html

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2006-04-26T22:00:00

Updated: 2024-08-08T00:01:22.492Z

Reserved: 2006-04-26T00:00:00

Link: CVE-2005-4790

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2005-12-31T05:00:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2005-4790

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2005-10-07T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple untrusted search path vulnerabilities in SUSE Linux 9.3 and 10.0, and possibly other distributions, cause the working directory to be added to LD_LIBRARY_PATH, which might allow local users to execute arbitrary code via (1) beagle, (2) tomboy, or (3) blam. NOTE: in August 2007, the tomboy vector was reported for other distributions."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-03T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://bugs.gentoo.org/show_bug.cgi?id=188806"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://bugs.gentoo.org/show_bug.cgi?id=199841"}, {"name": "27621", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/27621"}, {"name": "27608", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/27608"}, {"name": "28672", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/28672"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://bugzilla.gnome.org/show_bug.cgi?id=485224"}, {"name": "MDVSA-2008:064", "tags": ["vendor-advisory", "x_refsource_MANDRIVA"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:064"}, {"name": "39578", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/39578"}, {"name": "27799", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/27799"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=362941"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://bugs.gentoo.org/show_bug.cgi?id=189249"}, {"name": "26480", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/26480"}, {"name": "SUSE-SR:2005:022", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://www.novell.com/linux/security/advisories/2005_22_sr.html"}, {"name": "28339", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/28339"}, {"name": "GLSA-200711-12", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "http://security.gentoo.org/glsa/glsa-200711-12.xml"}, {"name": "39577", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/39577"}, {"name": "25341", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/25341"}, {"name": "FEDORA-2007-3011", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00206.html"}, {"name": "USN-560-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU"], "url": "https://usn.ubuntu.com/560-1/"}, {"name": "FEDORA-2007-3792", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00913.html"}, {"name": "tomboy-ldlibrarypath-privilege-escalation(36054)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36054"}, {"name": "GLSA-200801-14", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "http://security.gentoo.org/glsa/glsa-200801-14.xml"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2005-4790", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple untrusted search path vulnerabilities in SUSE Linux 9.3 and 10.0, and possibly other distributions, cause the working directory to be added to LD_LIBRARY_PATH, which might allow local users to execute arbitrary code via (1) beagle, (2) tomboy, or (3) blam. NOTE: in August 2007, the tomboy vector was reported for other distributions."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://bugs.gentoo.org/show_bug.cgi?id=188806", "refsource": "MISC", "url": "http://bugs.gentoo.org/show_bug.cgi?id=188806"}, {"name": "http://bugs.gentoo.org/show_bug.cgi?id=199841", "refsource": "CONFIRM", "url": "http://bugs.gentoo.org/show_bug.cgi?id=199841"}, {"name": "27621", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/27621"}, {"name": "27608", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/27608"}, {"name": "28672", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/28672"}, {"name": "https://bugzilla.gnome.org/show_bug.cgi?id=485224", "refsource": "CONFIRM", "url": "https://bugzilla.gnome.org/show_bug.cgi?id=485224"}, {"name": "MDVSA-2008:064", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:064"}, {"name": "39578", "refsource": "OSVDB", "url": "http://osvdb.org/39578"}, {"name": "27799", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/27799"}, {"name": "https://bugzilla.redhat.com/show_bug.cgi?id=362941", "refsource": "CONFIRM", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=362941"}, {"name": "http://bugs.gentoo.org/show_bug.cgi?id=189249", "refsource": "CONFIRM", "url": "http://bugs.gentoo.org/show_bug.cgi?id=189249"}, {"name": "26480", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/26480"}, {"name": "SUSE-SR:2005:022", "refsource": "SUSE", "url": "http://www.novell.com/linux/security/advisories/2005_22_sr.html"}, {"name": "28339", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/28339"}, {"name": "GLSA-200711-12", "refsource": "GENTOO", "url": "http://security.gentoo.org/glsa/glsa-200711-12.xml"}, {"name": "39577", "refsource": "OSVDB", "url": "http://osvdb.org/39577"}, {"name": "25341", "refsource": "BID", "url": "http://www.securityfocus.com/bid/25341"}, {"name": "FEDORA-2007-3011", "refsource": "FEDORA", "url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00206.html"}, {"name": "USN-560-1", "refsource": "UBUNTU", "url": "https://usn.ubuntu.com/560-1/"}, {"name": "FEDORA-2007-3792", "refsource": "FEDORA", "url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00913.html"}, {"name": "tomboy-ldlibrarypath-privilege-escalation(36054)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36054"}, {"name": "GLSA-200801-14", "refsource": "GENTOO", "url": "http://security.gentoo.org/glsa/glsa-200801-14.xml"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-08T00:01:22.492Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://bugs.gentoo.org/show_bug.cgi?id=188806"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://bugs.gentoo.org/show_bug.cgi?id=199841"}, {"name": "27621", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/27621"}, {"name": "27608", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/27608"}, {"name": "28672", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/28672"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bugzilla.gnome.org/show_bug.cgi?id=485224"}, {"name": "MDVSA-2008:064", "tags": ["vendor-advisory", "x_refsource_MANDRIVA", "x_transferred"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:064"}, {"name": "39578", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/39578"}, {"name": "27799", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/27799"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=362941"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://bugs.gentoo.org/show_bug.cgi?id=189249"}, {"name": "26480", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/26480"}, {"name": "SUSE-SR:2005:022", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://www.novell.com/linux/security/advisories/2005_22_sr.html"}, {"name": "28339", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/28339"}, {"name": "GLSA-200711-12", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "http://security.gentoo.org/glsa/glsa-200711-12.xml"}, {"name": "39577", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/39577"}, {"name": "25341", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/25341"}, {"name": "FEDORA-2007-3011", "tags": ["vendor-advisory", "x_refsource_FEDORA", "x_transferred"], "url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00206.html"}, {"name": "USN-560-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU", "x_transferred"], "url": "https://usn.ubuntu.com/560-1/"}, {"name": "FEDORA-2007-3792", "tags": ["vendor-advisory", "x_refsource_FEDORA", "x_transferred"], "url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00913.html"}, {"name": "tomboy-ldlibrarypath-privilege-escalation(36054)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36054"}, {"name": "GLSA-200801-14", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "http://security.gentoo.org/glsa/glsa-200801-14.xml"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2005-4790", "datePublished": "2006-04-26T22:00:00", "dateReserved": "2006-04-26T00:00:00", "dateUpdated": "2024-08-08T00:01:22.492Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:novell:suse_linux:10.0:*:*:*:*:*:*:*", "matchCriteriaId": "92FB0F1B-80B4-47F9-A54C-51DB7E77CA08", "vulnerable": true}, {"criteria": "cpe:2.3:o:suse:suse_linux:9.3:*:*:*:*:*:*:*", "matchCriteriaId": "A7D073E9-E535-4B36-BEF2-8499536E37DA", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple untrusted search path vulnerabilities in SUSE Linux 9.3 and 10.0, and possibly other distributions, cause the working directory to be added to LD_LIBRARY_PATH, which might allow local users to execute arbitrary code via (1) beagle, (2) tomboy, or (3) blam. NOTE: in August 2007, the tomboy vector was reported for other distributions."}], "id": "CVE-2005-4790", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 6.9, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.4, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2005-12-31T05:00:00.000", "references": [{"source": "cve@mitre.org", "url": "http://bugs.gentoo.org/show_bug.cgi?id=188806"}, {"source": "cve@mitre.org", "url": "http://bugs.gentoo.org/show_bug.cgi?id=189249"}, {"source": "cve@mitre.org", "url": "http://bugs.gentoo.org/show_bug.cgi?id=199841"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/39577"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/39578"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/26480"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/27608"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/27621"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/27799"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/28339"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/28672"}, {"source": "cve@mitre.org", "url": "http://security.gentoo.org/glsa/glsa-200711-12.xml"}, {"source": "cve@mitre.org", "url": "http://security.gentoo.org/glsa/glsa-200801-14.xml"}, {"source": "cve@mitre.org", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:064"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.novell.com/linux/security/advisories/2005_22_sr.html"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/25341"}, {"source": "cve@mitre.org", "url": "https://bugzilla.gnome.org/show_bug.cgi?id=485224"}, {"source": "cve@mitre.org", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=362941"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36054"}, {"source": "cve@mitre.org", "url": "https://usn.ubuntu.com/560-1/"}, {"source": "cve@mitre.org", "url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00206.html"}, {"source": "cve@mitre.org", "url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00913.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://bugs.gentoo.org/show_bug.cgi?id=188806"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://bugs.gentoo.org/show_bug.cgi?id=189249"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://bugs.gentoo.org/show_bug.cgi?id=199841"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/39577"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/39578"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/26480"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/27608"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/27621"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/27799"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/28339"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/28672"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://security.gentoo.org/glsa/glsa-200711-12.xml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://security.gentoo.org/glsa/glsa-200801-14.xml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:064"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.novell.com/linux/security/advisories/2005_22_sr.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/25341"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://bugzilla.gnome.org/show_bug.cgi?id=485224"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=362941"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36054"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://usn.ubuntu.com/560-1/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00206.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00913.html"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}