CVE-2009-0667
Published Jul 9, 2009
Last updated a year ago
Overview
- Description
- Untrusted search path vulnerability in Agent/Backend.pm in Ocsinventory-Agent before 0.0.9.3, and 1.x before 1.0.1, in OCS Inventory allows local users to gain privileges via a Trojan horse Perl module in an arbitrary directory.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.2
- Impact score
- 10
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C9C9D8DD-6505-4903-9181-26223DA65DD2"
},
{
"criteria": "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CCBDA19C-8B65-4D0D-80B6-3C1E76C5BE5B"
},
{
"criteria": "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3E915093-BDDA-4A75-A0D0-819246D94249"
},
{
"criteria": "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5CDE845A-A67A-4DCC-BC61-FC64C6943C3E"
},
{
"criteria": "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B363C2E6-FAB1-4CED-9C0D-3797AEC814E1"
},
{
"criteria": "cpe:2.3:a:ocsinventory-ng:ocs_inventory_ng:1.0:rc3-1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F8B28BF3-C16C-458A-BC9B-23631D2B7623"
},
{
"criteria": "cpe:2.3:a:ocsinventory-ng:ocsinventory-agent:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE80E70E-7BF9-4F74-8B28-130F3B4F2CFF",
"versionEndIncluding": "0.0.9.2"
},
{
"criteria": "cpe:2.3:a:ocsinventory-ng:ocsinventory-agent:0.05:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8EAE7F8C-F2D3-4FE7-8331-C73CD0A65954"
},
{
"criteria": "cpe:2.3:a:ocsinventory-ng:ocsinventory-agent:0.08:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "50959273-4987-402E-B2D6-77D6FD017E1C"
},
{
"criteria": "cpe:2.3:a:ocsinventory-ng:ocsinventory-agent:0.09:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "41F504A6-777B-41D0-99C0-FAD3EDD18DAA"
}
],
"operator": "OR"
}
]
}
]