CVE-2005-4791
Fixed in a distro release EPSS <1%
Multiple untrusted search path vulnerabilities in SUSE Linux 10.0 cause the working directory to be added to LD_LIBRARY_PATH, which might allow local users to execute arbitrary code via (1) liferea or (2) banshee.
Products: novell suse_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | beagle | 0.2.13-1 |
| Debian 12 | liferea | 1.4.9-1 |
| Debian 13 | beagle | 0.2.13-1 |
| Debian 13 | liferea | 1.4.9-1 |
| Debian 14 | beagle | 0.2.13-1 |
| Debian 14 | liferea | 1.4.9-1 |
| Debian 5.0 | liferea | 1.0.27-2+lenny1 |
| openSUSE Tumbleweed | liferea | 1.13.6-2.2 |