Untrusted search path vulnerability in (1) reportbug 3.8 and 3.31, and (2) reportbug-ng before 0.2008.06.04, allows local users to execute arbitrary code via a malicious module file in the current working directory.
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Reportbug | Reportbug-ng | 3.8 (including) | 3.8 (including) |
Reportbug | Reportbug-ng | 3.31 (including) | 3.31 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.03.10 (including) | 0.2007.03.10 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.03.11 (including) | 0.2007.03.11 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.03.13 (including) | 0.2007.03.13 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.03.14 (including) | 0.2007.03.14 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.03.15 (including) | 0.2007.03.15 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.03.17 (including) | 0.2007.03.17 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.03.19 (including) | 0.2007.03.19 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.03.19.2 (including) | 0.2007.03.19.2 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.03.20 (including) | 0.2007.03.20 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.03.24 (including) | 0.2007.03.24 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.03.27 (including) | 0.2007.03.27 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.03.28 (including) | 0.2007.03.28 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.03.29 (including) | 0.2007.03.29 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.04.07 (including) | 0.2007.04.07 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.04.07.2 (including) | 0.2007.04.07.2 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.04.13 (including) | 0.2007.04.13 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.04.16 (including) | 0.2007.04.16 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.04.20 (including) | 0.2007.04.20 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.04.23 (including) | 0.2007.04.23 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.04.27 (including) | 0.2007.04.27 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.05.02 (including) | 0.2007.05.02 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.05.27 (including) | 0.2007.05.27 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.05.28 (including) | 0.2007.05.28 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.05.31 (including) | 0.2007.05.31 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.06.13 (including) | 0.2007.06.13 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.06.27 (including) | 0.2007.06.27 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.07.08 (including) | 0.2007.07.08 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.07.12 (including) | 0.2007.07.12 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.07.18 (including) | 0.2007.07.18 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.07.19 (including) | 0.2007.07.19 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.08.02 (including) | 0.2007.08.02 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.08.03 (including) | 0.2007.08.03 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.08.03.2 (including) | 0.2007.08.03.2 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.08.12 (including) | 0.2007.08.12 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.08.20 (including) | 0.2007.08.20 (including) |
Reportbug-ng | Reportbug-ng | 0.2007.10.30 (including) | 0.2007.10.30 (including) |
Reportbug-ng | Reportbug-ng | 0.2008.01.20 (including) | 0.2008.01.20 (including) |
Reportbug-ng | Reportbug-ng | 0.2008.03.26 (including) | 0.2008.03.26 (including) |
Reportbug-ng | Reportbug-ng | 0.2008.03.28 (including) | 0.2008.03.28 (including) |
Reportbug | Ubuntu | dapper | * |
Reportbug | Ubuntu | feisty | * |
Reportbug | Ubuntu | gutsy | * |
Reportbug | Ubuntu | hardy | * |
Reportbug | Ubuntu | upstream | * |
Reportbug-ng | Ubuntu | gutsy | * |
Reportbug-ng | Ubuntu | hardy | * |
Reportbug-ng | Ubuntu | upstream | * |