Vulnerability in Tavis Rudd Cheetah
CVE-2005-1632
Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local users to execute arbitrary code via a malicious module in /tmp/.
EPSS: 0.004 (35.5th percentile) — read the EPSS interpretation.
Affected products
- Tavis_rudd Cheetah — versions 0.9.15, 0.9.16
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)