CVE-2004-2133

State: Published
Severity: Not scored
Published: May 27, 2005
Updated: Aug 8, 2024
Reserved: May 27, 2005

Description

Certain third-party packages for CVSup 16.1h, such as SuSE Linux, contain untrusted paths in the ELF RPATH fields of certain executables, which could allow local users to execute arbitrary code by causing cvsup to link against malicious libraries that are created in world-writable directories such as /usr/src/packages.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

cvsup-rpath-gain-privileges(14994)vdb-entry
20040129 Security Announcement: untrusted ELF library path in some cvsup binary RPMsmailing-list
9523vdb-entry
20040129 Security Announcement: untrusted ELF library path in some cvsup binary RPMsmailing-list

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.