CVE-2008-4865
01.11.2008, 00:00
Untrusted search path vulnerability in valgrind before 3.4.0 allows local users to execute arbitrary programs via a Trojan horse .valgrindrc file in the current working directory, as demonstrated using a malicious --db-command options. NOTE: the severity of this issue has been disputed, but CVE is including this issue because execution of a program from an untrusted directory is a common scenario.Enginsight
| Vendor | Product | Version |
|---|---|---|
| valgrind | valgrind | 𝑥 ≤ 3.4.0 |
| valgrind | valgrind | 1.9.6 |
| valgrind | valgrind | 2.0.0 |
| valgrind | valgrind | 2.1.0 |
| valgrind | valgrind | 2.1.1 |
| valgrind | valgrind | 2.2.0 |
| valgrind | valgrind | 2.4.1 |
| valgrind | valgrind | 2.4.1 |
| valgrind | valgrind | 3.0.0 |
| valgrind | valgrind | 3.0.1 |
| valgrind | valgrind | 3.1.0 |
| valgrind | valgrind | 3.1.1 |
| valgrind | valgrind | 3.2.0 |
| valgrind | valgrind | 3.2.1 |
| valgrind | valgrind | 3.2.2 |
| valgrind | valgrind | 3.2.3 |
| valgrind | valgrind | 3.3.0 |
| valgrind | valgrind | 3.3.0:rc1 |
| valgrind | valgrind | 3.3.0:rc2 |
| valgrind | valgrind | 3.3.0:rc3 |
| valgrind | valgrind | 3.3.1 |
| valgrind | valgrind | 3.3.1:rc1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References