CVEvulnerability

CVE-2004-2133

4.6 MEDIUM Published 2004-01-29 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-01-29
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

Certain third-party packages for CVSup 16.1h, such as SuSE Linux, contain untrusted paths in the ELF RPATH fields of certain executables, which could allow local users to execute arbitrary code by causing cvsup to link against malicious libraries that are created in world-writable directories such as /usr/src/packages.

Affected configurations

• cvsup cvsup cvsup-16.1h-2.i386.rpm • cvsup cvsup cvsup-16.1h-36.i586.rpm • cvsup cvsup cvsup-16.1h-43.i586.rpm

References