CVE-2008-3277
Description
Untrusted search path vulnerability in a certain Red Hat build script for the ibmssh executable in ibutils packages before ibutils-1.5.7-2.el6 in Red Hat Enterprise Linux (RHEL) 6 and ibutils-1.2-11.2.el5 in Red Hat Enterprise Linux (RHEL) 5 allows local users to gain privileges via a Trojan Horse program in refix/lib/, related to an incorrect RPATH setting in the ELF header.
Risk Information
Base Score
9.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.042
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| (RHSA-2012:0311) Low: ibutils security and bug fix update ibutils-1.2-11.2.el5.i386.rpm | Linux |
| (RHSA-2012:0311) Low: ibutils security and bug fix update ibutils-1.2-11.2.el5.x86_64.rpm | Linux |
| (RHSA-2012:0311) Low: ibutils security and bug fix update ibutils-devel-1.2-11.2.el5.i386.rpm | Linux |
| (RHSA-2012:0311) Low: ibutils security and bug fix update ibutils-devel-1.2-11.2.el5.x86_64.rpm | Linux |
| (RHSA-2012:0311) Low: ibutils security and bug fix update ibutils-libs-1.2-11.2.el5.i386.rpm | Linux |
| (RHSA-2012:0311) Low: ibutils security and bug fix update ibutils-libs-1.2-11.2.el5.x86_64.rpm | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234