The default configuration of Slackware 3.4, and possibly other versions, includes . (dot, the current directory) in the PATH environmental variable, which could allow local users to create Trojan horse programs that are inadvertently executed by other users.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Slackware_linux | Slackware | 2.0.35 (including) | 2.0.35 (including) |
| Slackware_linux | Slackware | 3.4 (including) | 3.4 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=91540043023167\u0026w=2
- http://www.securityfocus.com/bid/211
- http://marc.info/?l=bugtraq\u0026m=91540043023167\u0026w=2
- http://www.securityfocus.com/bid/211