Vulnerability in Openoffice

CVE-2008-2366

Untrusted search path vulnerability in a certain Red Hat build script for OpenOffice.org (OOo) 1.1.x on Red Hat Enterprise Linux (RHEL) 3 and 4 allows local users to gain privileges via a malicious library in the current working directory, related to incorrect quoting of the ORIGIN symbol for use in the RPATH library path.

EPSS: 0.003 (24.8th percentile) — read the EPSS interpretation.

Affected products

Openoffice — versions 1.1
Redhat Enterprise_linux — versions 3.0, 4.0
N/a — versions n/a

Weakness classification (CWE)

CWE-16

References

secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
secalert@redhat.com (vdb-entry, x_refsource_BID)
secalert@redhat.com (signature, x_refsource_OVAL, vdb-entry)
secalert@redhat.com (vdb-entry, x_refsource_XF)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
secalert@redhat.com (vdb-entry, x_refsource_SECTRACK)