CVEvulnerability

CVE-2009-0854

6.9 MEDIUM Published 2009-03-11 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-03-11
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-78

Description

Untrusted search path vulnerability in dash 0.5.4, when used as a login shell, allows local users to execute arbitrary code via a Trojan horse .profile file in the current working directory.

Affected configurations

• dash dash 0.5.4

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References