CVE-2008-3277 in ibutils

Summary

Untrusted search path vulnerability in a certain Red Hat build script for the ibmssh executable in ibutils packages before ibutils-1.5.7-2.el6 in Red Hat Enterprise Linux (RHEL) 6 and ibutils-1.2-11.2.el5 in Red Hat Enterprise Linux (RHEL) 5 allows local users to gain privileges via a Trojan Horse program in refix/lib/, related to an incorrect RPATH setting in the ELF header.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservation: 07/24/2008
• Disclosure: 04/15/2014
• Moderation: VulDB entry created
• Entries: VDB-69361 (1)
• CPE: ready
• CWE: CWE-22 (Confirmed)
• CVSS: 5.9
• EPSS: 0.00036
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-3277
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-3277
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-3277/